Audit log file json format

Is there a way for the audit filter log file to log the same way as the old audit plugin?

I used the json format for the old audit plugin and am using the json format for the audit filter log but they look completely different.

Hi @ipcmlr

They both use JSON, but the audit filter log component has a new structure (and also it uses JSON array), which is why it seems strange to you. Apart from that, you can’t change it.

Audit Log Plugin

{“audit_record”:{“name”:“Query”,“record”:“13149_2021-06-30T15:03:11”,“timestamp”:“2021-06-30T15:07:58 UTC”,“command_class”:“show_databases”,“connection_id”:“2”,“status”:0,“sqltext”:“show databases”,“user”:“root[root] @ localhost ”,“host”:“localhost”,“os_user”:“”,“ip”:“”,“db”:“”}}

Audit Log Filter Component:

[ { "timestamp": "2023-03-29 11:17:03", "id": 0, "class": "audit", "server_id": 1 }, { "timestamp": "2023-03-29 11:17:05", "id": 1, "class": "command", "event": "command_start", "connection_id": 1, "command_data": { "name": "command_start", "status": 0, "command": "query"} },

Thanks. Was hoping that I would not need to rewrite auditing scripts. thanks.