[mysqld] audit_log_rotate_on_size = 104857600 audit_log_rotations = 9 Old files: audit.log.1 , audit.log.2 , ...
1. Overview The Percona Audit Log Plugin is a server-side extension for MySQL and MariaDB (primarily distributed with Percona Server for MySQL) that provides comprehensive logging of database activity. Unlike the basic general query log, the audit plugin is designed for compliance, security monitoring, and forensic analysis. It captures events such as connections, queries, table accesses, and administrative actions without impacting performance as severely as the general log. percona audit plugin
SHOW STATUS LIKE 'audit_log%'; -- e.g., audit_log_current_size, audit_log_buffer_size, audit_log_lost_events (critical): Unlike the basic general query log, the audit
SET GLOBAL audit_log_filter = ' ... json ... '; "audit_record": "timestamp": "2025-02-18T10:23:45.123 UTC", "id": 202502, "class": "general", "event": "status", "connection_id": 54321, "user": "webapp@10.0.1.55", "host": "10.0.1.55", "database": "ecommerce", "command": "Query", "sqltext": "UPDATE orders SET status='shipped' WHERE order_id=12345", "status": 0, "rows_examined": 1, "rows_sent": 0 json ... '
"rule": "user": "monitor_user", "log": false
Apply filter:
(if using syslog or custom paths):