# Audit log stopped working all of a sudden

**URL:** <https://forums.percona.com/t/audit-log-stopped-working-all-of-a-sudden/24579>\
**Category:** Percona Server for MySQL 8.0\
**Created:** [August 21, 2023, 6:05pm UTC](https://forums.percona.com/t/audit-log-stopped-working-all-of-a-sudden/24579 "2023-08-21T18:05:40Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ramasamy](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ramasamy/32/16466_2.png) [@Ramasamy](https://forums.percona.com/u/Ramasamy)\
**Post date:** [August 21, 2023, 6:05pm UTC](https://forums.percona.com/t/audit-log-stopped-working-all-of-a-sudden/24579/1 "2023-08-21T18:05:40Z")

</div>

Hi,

In one of our MySQL server (8.0.33), all of a sudden audit log stopped working.

Here are the settings  
mysql\> show global variables like ‘audit%’;  
±----------------------------±-----------------------------------------------------------------------------------------------------------+  
| Variable\_name | Value |  
±----------------------------±-----------------------------------------------------------------------------------------------------------+  
| audit\_log\_buffer\_size | 1048576 |  
| audit\_log\_exclude\_accounts | audit\_user@localhost,audit\_user@%,dbmonitor@%,SWAdmin@%,dpa@%,pmmuser@localhost |  
| audit\_log\_exclude\_commands | select,insert,insert\_select,delete,delete\_multi,update,update\_multi,prepare\_sql,execute\_sql,call\_procedure |  
| audit\_log\_exclude\_databases | |  
| audit\_log\_file | /mysql-audit/audit.log |  
| audit\_log\_flush | OFF |  
| audit\_log\_format | JSON |  
| audit\_log\_handler | FILE |  
| audit\_log\_include\_accounts | |  
| audit\_log\_include\_commands | |  
| audit\_log\_include\_databases | |  
| audit\_log\_policy | ALL |  
| audit\_log\_rotate\_on\_size | 0 |  
| audit\_log\_rotations | 0 |  
| audit\_log\_strategy | ASYNCHRONOUS |  
| audit\_log\_syslog\_facility | LOG\_USER |  
| audit\_log\_syslog\_ident | percona-audit |  
| audit\_log\_syslog\_priority | LOG\_INFO |  
±----------------------------±-----------------------------------------------------------------------------------------------------------+  
18 rows in set (0.00 sec)

mysql\>

---

<div class="post-metadata">

**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\
**Post date:** [August 21, 2023, 6:40pm UTC](https://forums.percona.com/t/audit-log-stopped-working-all-of-a-sudden/24579/2 "2023-08-21T18:40:24Z")

</div>

Anything in your mysql error log? Have you tried force rotating/flushing the audit log?

---

<div class="post-metadata">

**Author:** ![Ramasamy](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ramasamy/32/16466_2.png) [@Ramasamy](https://forums.percona.com/u/Ramasamy)\
**Post date:** [August 21, 2023, 6:48pm UTC](https://forums.percona.com/t/audit-log-stopped-working-all-of-a-sudden/24579/3 "2023-08-21T18:48:59Z")

</div>

Nothing seen in the mysql error file

No configuration change made for the last 90 days plus… But all of a sudden stopped worked from Friday 19:22 UTC!!

---

<div class="post-metadata">

**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\
**Post date:** [August 21, 2023, 7:40pm UTC](https://forums.percona.com/t/audit-log-stopped-working-all-of-a-sudden/24579/4 "2023-08-21T19:40:57Z")

</div>

Can you unload the plugin and reload it? It’s very odd that it would stop with no indications in the error log.

---

<div class="post-metadata">

**Author:** ![Ramasamy](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ramasamy/32/16466_2.png) [@Ramasamy](https://forums.percona.com/u/Ramasamy)\
**Post date:** [August 21, 2023, 7:44pm UTC](https://forums.percona.com/t/audit-log-stopped-working-all-of-a-sudden/24579/5 "2023-08-21T19:44:37Z")

</div>

Thanks Matthew!! Could you please provide me the steps to unload and reload the plugin?

---

<div class="post-metadata">

**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\
**Post date:** [August 21, 2023, 9:45pm UTC](https://forums.percona.com/t/audit-log-stopped-working-all-of-a-sudden/24579/6 "2023-08-21T21:45:08Z")

</div>

You can find most instructions in [our documentation](https://docs.percona.com/percona-server/8.0/management/audit_log_plugin.html):

```
UNINSTALL PLUGIN audit_log;
INSTALL PLUGIN audit_log SONAME 'audit_log.so';

```