You can implement a http://api.neo4j.org/2.0.0/org/neo4j/graphdb/event/TransactionEventHandler.html that tracks the changes to your splunk instance. Be aware that a poorly written transactionEventHandler will seriously impact performance.
At this level you only have the information like node A changed property B to value abc. In a lot of auditing use cases you want to track on a use-case/process level (user ABC purchased item def). 2013/12/19 Michael Boyar <[email protected]> > For audit purposes, I'd like to keep the history of property changes. > Say I have a property cost_center: 3651 > At some point the value changes to cost_center: 4112 > Ideally, I would have 2 records somewhere: > timestamp1 cost_center: 3651 > timestamp2 cost_center: 4112 > > My use case is: > -The older values may remain read-only, the newest value will be > read-write, a partially persistent arrangement > -The older values are seldom queried, maybe in 1% of the cases, query > performance for them in not important > -I'd rather keep neo4j store conceptually simple, the mutable database as > originally intended, and avoid cluttering the nodes and relationships with > seldom used timestamps, multiple property values, etc. > -So maybe I can get away with keeping in neo4j the latest values only, and > keeping all historical values in some other, non-mutable database that > indexes timestamps, for example Splunk? > > I have a large Splunk licence that I already paid for, so the cost is not > an issue. > > My question: > How do I figure out the latest changes in neo4j instance? That's in order > to ship the change log elsewhere? Are neo4j transaction logs a good > starting point? Where can I read more about them? > > Also, if you guys disagree with this engineering approach in principle, > I'd appreciate hearing from you. > > Thanks > > > -- > You received this message because you are subscribed to the Google Groups > "Neo4j" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > -- You received this message because you are subscribed to the Google Groups "Neo4j" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
