security-audit: audit-processor flush_interval 5m -> 1m

Deliver audit events to MinIO within a minute for near-real-time
investigation; trade-off is more small parquet files (compaction
is planned in stage 3 of k8s-audit).
This commit is contained in:
emelinda 2026-11-07 18:07:36 +03:00
parent a6a176d6c5
commit ff931e1708

View File

@ -50,7 +50,7 @@ data:
port: 8000 # /healthz, /readyz, /metrics
stream:
flush_interval: 5m
flush_max_rows: 10000
flush_interval: 1m # как часто сбрасывать буфер в MinIO (и коммитить offset'ы)
flush_max_rows: 10000 # или раньше, при стольких строках
flush_timeout: 30s # меньше kafka.rebalance_timeout
max_flush_failures: 30