8.4 Audit items Install/Upgrade

MySQL & MariaDB Percona XtraDB Cluster 8.x
1

Ok so I am struggling here..

Current setup and following various docs that I have found on the site

Right Now a 3 Node Xdb cluster running 8.0.x

  • Attempting a rolling upgrade from 8.x to 8.4
  • Backups made
  • Shutdown one node
  • Upgrade to 8.4
  • Make my.cnf changes where needed
  • Attempt to bring 8.4 back up
  • MOST items working properly

The Item I am struggling with is getting Auditing working on the 8.4 system I have had a few times where on the 8.4 system the SST had to happen (and would not start as I had some changed I missed in the my.cnf file and it would not start)

I have tried half a dozen ways thinking that the old audit plugin needs to be removed

I tried this Install the Audit Log Filter - Percona Server for MySQL
and the Manual update link does not tell me really anything on how to do it
Upgrading from plugins to components - Percona Server for MySQL

I also found the big report and am on 8.4.5-5.1 and made sure that the user ID I am using has all needed rights..

Any help someplace? I’m Starting to think that I should remain on 8.0 for a bit more to let 8.4 mature a bit more

info.txt (8.6 KB)

My old 8.0 config was
audit-log-format=“json”
audit-log-policy=“queries”
audit-log-rotate-on-size = 104857600
audit-log-rotations = 2
audit-log-file = /apps/opt/application/mysql/log/audit.log
log_error_verbosity=3
log_error_services=“log_filter_internal; log_sink_json”

The New I cant get to work at all and not sure what I am missing..

2

Considering that 8.0 will EOL in April 2026, and that 8.4 is the current GA version, I don’t think 8.4 is in a position to “mature a bit more.” :slight_smile:

You are correct in that 8.0 audit plugin is removed, and 8.4 audit component should be used instead.

You are also correct that the linked documentation page does not explain how to remove plugins. Use SHOW PLUGINS;, then UNINSTALL PLUGIN XXXX; Then install the component, and configure.

3

So if you have the audit-log-* in the my.cnf file 8.4 will NOT start
If you remove it from the config file it will start
Once you drop the plugin and attempt to restart it
And for some reason when I try to do the install component I can not get this to work at all

@matthewb Note the link that I posted says
To upgrade from audit_log_filter plugin in Percona Server 8.4 to component_audit_log_filter component in Percona Server 8.4, do the manual upgrade.

Has anyone managed to get the audit to work on a upgrade path?



mysql> SELECT * FROM information_schema.PLUGINS WHERE PLUGIN_NAME LIKE '%audit%'\G;
Empty set (0.00 sec)

ERROR:
No query specified

mysql> select * from mysql.component;
+--------------+--------------------+------------------------------------+
| component_id | component_group_id | component_urn                      |
+--------------+--------------------+------------------------------------+
|           25 |                  7 | file://component_audit_log_filter  |
|           26 |                 26 | file://component_percona_telemetry |

mysql> select audit_log_filter_set_filter('log_actions', '{ "filter": {"log": true} }');
+---------------------------------------------------------------------------+
| audit_log_filter_set_filter('log_actions', '{ "filter": {"log": true} }') |
+---------------------------------------------------------------------------+
| ERROR: Failed to check filtering rule name existence                      |
+---------------------------------------------------------------------------+
4

Hi @meyerder,

So if you have the audit-log-* in the my.cnf file 8.4 will NOT start
If you remove it from the config file it will start
Once you drop the plugin and attempt to restart it

Correct.

Has anyone managed to get the audit to work on a upgrade path?

These forums have many success stories regarding using the audit component in 8.4.