hashicorp · peteski22 · Oct 11, 2023 · Oct 11, 2023 · Oct 11, 2023 · Oct 11, 2023
@@ -17,6 +17,7 @@ Version | Issue
 ------- | -----
 1.15.0+ | [Vault no longer reports rollback metrics by mountpoint](/vault/docs/upgrading/upgrade-to-1.15.x#rollback-metrics)
 1.15.0  | [Panic in AWS auth method during IAM-based login](/vault/docs/upgrading/upgrade-to-1.15.x#panic-in-aws-auth-method-during-iam-based-login)
+1.15    | [Vault file audit devices do not honor SIGHUP signal to reload](/vault/docs/upgrading/upgrade-to-1.15.x#file-audit-devices-do-not-honor-sighup-signal-to-reload)
 
 ## Vault companion updates
 

@@ -52,3 +52,5 @@ option.
 @include 'known-issues/transit-managed-keys-sign-fails.mdx'
 
 @include 'known-issues/aws-auth-panics.mdx'
+
+@include 'known-issues/1_15-audit-file-sighup-does-not-trigger-reload.mdx'
@@ -0,0 +1,36 @@
+### File audit devices do not honor SIGHUP signal to reload
+
+#### Affected versions
+
+- 1.15.0
+
+#### Issue
+
+Sending [`SIGHUP`](/vault/docs/audit/file#log-file-rotation) to Vault after rotating
+an audit log file doesn't reopen the file path as expected.
+
+If the file was moved (renamed), then Vault will continue to write data to the location
+of the moved file.
+
+If the file was deleted, then Vault will continue to write data to the deleted file.
+The file will be deleted by the OS once Vault is sealed or restarted, but
+until then will continue to consume disk space due to audit entries being written.
+
+<Warning title="Missing Audit Entries">
+  If the file was deleted (rather than moved locally) then audit entries written
+  by Vault will be lost.
+</Warning>
+
+The issue has been fixed for a patch release in Vault `1.15.1`.
+
+#### Workaround
+
+If your Vault cluster uses any `file` audit devices, you can use the following
+environment variable set to `true` in order to disable the new underlying event
+framework Vault uses to process audit events.
+
+| Environment variable name         | Value  |
+|-----------------------------------|--------|
+| `VAULT_AUDIT_DISABLE_EVENTLOGGER` | `true` |
+
+Please note that this environment variable will be removed in a future release of Vault.
Original file line number	Diff line number	Diff line change
Expand Up		@@ -52,3 +52,5 @@ option.
		@include 'known-issues/transit-managed-keys-sign-fails.mdx'

		@include 'known-issues/aws-auth-panics.mdx'

		@include 'known-issues/1_15-audit-file-sighup-does-not-trigger-reload.mdx'