Add resource names into the event about hermes HOT 9 CLOSED

@kayrus we have a project now to find a way to do this.

from hermes.

Hermes is the API in the process. In order of process
Openstack Service (nova/designate/etc) - Could do them, but requires a lot of updates to each openstack component
->
Openstack Audit Middleware https://github.com/sapcc/openstack-audit-middleware - Could do them, requires a consistent service to do lookups
->
Rabbitmq - No
->
Logstash - Bad idea, would require a service for lookups
->
Elasticsearch - No
->
Hermes Api - All attempts we've made in the past to do lookups for names has overloaded the identity service (identity lookups), and we were told to stop.

So the main question I have is, do we have, or can we(should we) build a lookup service that can handle a ton of lookups for all sorts of varying services.

That's the main impediment. From there, we can sort out a place for them.

from hermes.

Ok, then it means it's expensive. I cannot imagine that identity lookups have overloaded the identity service. Did the lookup logic use cache?

from hermes.

I wasn't involved, it may very well have been that the implementation was flawed. I recall there being a cache, but am unsure the specifics. If we can add lookups that don't overwhelm the identity service, that's reasonable.

from hermes.

You haven't provided your opinion on the client side lookup. Will it be a better alternative?

from hermes.

Ideally it should be in the audit process, and held in elasticsearch so that the data is the same in all locations. The client giving different answers to the dashboard feels unacceptable.

from hermes.

If we can add lookups that don't overwhelm the identity service, that's reasonable.

Do we need involve someone else to discuss this?

from hermes.

A POC for this is in process, and work should be done this sprint to implement a first run on it.

from hermes.

This is implemented via enrichments, if you have specific events you would like detail on, please request it to me. It is not done via the client, but through our enrichment process.

from hermes.