Not the answer you need?
Register and ask your own question!

About the user filtering of mysql percona audit plugin

spalaspala EntrantCurrent User Role Novice
I have a mysql server. I use Percona and I use the audit log plugin. I have no problem with this.

But there are too many active users in the sub-structure using mysql. I just want to keep the audit logs of real users. I want to use the include and exclude properties for this.

When I apply the following percona article, it fails because it cannot find the mysql variable. Does not add new variable.

Any advice on this?

https://www.percona.com/doc/percona-server/LATEST/management/audit_log_plugin.html#filtering-by-user

I have added the following line to my.cnf file, but again nothing has changed.

audit_log_include_accounts = 'test @ localhost'


I even wrote to StackOverflow hoping someone would help.
https://www.percona.com/blog/2015/09/10/percona-server-audit-log-plugin-best-practices/

[[email protected] ~]# cat /etc/redhat-release CentOS Linux release 7.5.1804 (Core) [[email protected] ~]# yum list installed |grep "percona" Percona-Server-client-57.x86_64 5.7.22-22.1.el7 @percona Percona-Server-server-57.x86_64 5.7.11-4.1.el7 @percona Percona-Server-shared-57.x86_64 5.7.22-22.1.el7 @percona Percona-Server-shared-compat-57.x86_64 5.7.22-22.1.el7 @percona percona-toolkit.x86_64 3.0.10-1.el7 @percona [[email protected] ~]# mysql -V mysql Ver 14.14 Distrib 5.7.22-22, for Linux (x86_64) using 6.2
mysql> SHOW VARIABLES LIKE 'audit%'; +
+
+ | Variable_name | Value | +
+
+ | audit_log_buffer_size | 1048576 | | audit_log_file | /var/log/mysql/audit.log | | audit_log_flush | OFF | | audit_log_format | JSON | | audit_log_handler | FILE | | audit_log_policy | ALL | | audit_log_rotate_on_size | 10485760 | | audit_log_rotations | 10 | | audit_log_strategy | ASYNCHRONOUS | | audit_log_syslog_facility | LOG_USER | | audit_log_syslog_ident | percona-audit | | audit_log_syslog_priority | LOG_INFO | +
+
+ 12 rows in set (0.01 sec) mysql> SET GLOBAL audit_log_include_accounts = '[email protected]'; ERROR 1193 (HY000): Unknown system variable 'audit_log_include_accounts' mysql> mysql> SET GLOBAL audit_log_include_accounts = NULL; ERROR 1193 (HY000): Unknown system variable 'audit_log_include_accounts'
[[email protected] ~]# cat /etc/my.cnf
[client] port = 3306 socket = /var/lib/mysql/mysql.sock [isamchk] key_buffer_size = 16M [mysqld] audit_log_file = /var/log/mysql/audit.log audit_log_format = JSON audit_log_policy = ALL audit_log_rotate_on_size = 10M audit_log_rotations = 10 basedir = /usr bind-address = 0.0.0.0 binlog-format = ROW datadir = /var/lib/mysql default-storage-engine = innodb expire_logs_days = 7 explicit_defaults_for_timestamp = 1 innodb-buffer-pool-size = 1G innodb-file-per-table = 1 innodb-flush-log-at-trx-commit = 2 innodb-flush-method = O_DIRECT innodb-log-file-size = 512M innodb-log-files-in-group = 2 key_buffer_size = 16M log-error = /var/log/mysql/mysqld.log log-queries-not-using-indexes = 0 max-connect-errors = 1000000 max-connections = 1000 max-heap-table-size = 512M max_allowed_packet = 16M
Sign In or Register to comment.

MySQL, InnoDB, MariaDB and MongoDB are trademarks of their respective owners.
Copyright ©2005 - 2020 Percona LLC. All rights reserved.