Audit log stopped working all of a sudden

MySQL & MariaDB Percona Server for MySQL 8.0
1

Hi,

In one of our MySQL server (8.0.33), all of a sudden audit log stopped working.

Here are the settings
mysql> show global variables like ‘audit%’;
±----------------------------±-----------------------------------------------------------------------------------------------------------+
| Variable_name | Value |
±----------------------------±-----------------------------------------------------------------------------------------------------------+
| audit_log_buffer_size | 1048576 |
| audit_log_exclude_accounts | audit_user@localhost,audit_user@%,dbmonitor@%,SWAdmin@%,dpa@%,pmmuser@localhost |
| audit_log_exclude_commands | select,insert,insert_select,delete,delete_multi,update,update_multi,prepare_sql,execute_sql,call_procedure |
| audit_log_exclude_databases | |
| audit_log_file | /mysql-audit/audit.log |
| audit_log_flush | OFF |
| audit_log_format | JSON |
| audit_log_handler | FILE |
| audit_log_include_accounts | |
| audit_log_include_commands | |
| audit_log_include_databases | |
| audit_log_policy | ALL |
| audit_log_rotate_on_size | 0 |
| audit_log_rotations | 0 |
| audit_log_strategy | ASYNCHRONOUS |
| audit_log_syslog_facility | LOG_USER |
| audit_log_syslog_ident | percona-audit |
| audit_log_syslog_priority | LOG_INFO |
±----------------------------±-----------------------------------------------------------------------------------------------------------+
18 rows in set (0.00 sec)

mysql>

2

Anything in your mysql error log? Have you tried force rotating/flushing the audit log?

3

Nothing seen in the mysql error file

No configuration change made for the last 90 days plus… But all of a sudden stopped worked from Friday 19:22 UTC!!

4

Can you unload the plugin and reload it? It’s very odd that it would stop with no indications in the error log.

5

Thanks Matthew!! Could you please provide me the steps to unload and reload the plugin?

6

You can find most instructions in our documentation:

UNINSTALL PLUGIN audit_log;
INSTALL PLUGIN audit_log SONAME 'audit_log.so';