赞
踩
mysql> show variables like '%plugin_dir%';
+---------------+------------------------------+
| Variable_name | Value |
+---------------+------------------------------+
| plugin_dir | /usr/local/mysql/lib/plugin/ |
+---------------+------------------------------+
2,将audit_版本号.so插件下载后放到plugin_dir位置,并改为audit.so
mv audit_版本号.so audit.so
3,加载插件
install plugin audit SONAME 'audit.so';
4,卸载插件
uninstall plugin audit;
5,查看插件状态
mysql> show variables like '%audit%';
+----------------+----------------------+
| Variable_name | Value |
+----------------+----------------------+
| audit_logfile | /tmp/mysql_audit.log |
| audit_myswitch | OFF |
| audit_num | 0 |
| audit_sql | all_sql |
| audit_user | all_user |
+----------------+----------------------+
5 rows in set (0.01 sec)
6,参数设置
mysql> set global audit_logfile='/tmp/mysql_audit_1.log';----只读变量,审计仅指定在/tmp/mysql_audit.log文件,保障权限可以写
ERROR 1238 (HY000): Variable 'audit_logfile' is a read only variable
set global audit_sql='DELETE;delete;ALTER;alter;DROP;drop;TRUNCATE;truncate'; -----这些审计关键字用;分开,这里需要注意,匹配的是执行SQL的关键字
set global audit_user='user2;user3'; ----审计用户用;隔开
set global num =40; ----审计sql影响的最少行数
set global audit_myswitch=on|off|ON|OFF|1|0; -----开启关闭审计
7,查看日志
[root@localhost] tail /tmp/mysql_audit.log
set global server_audit_file_path='/tmp/server_audit.log';
set global server_audit_events='connect,query,table,query_ddl,query_dml';
set global server_audit_logging='on'
Copyright © 2003-2013 www.wpsshop.cn 版权所有,并保留所有权利。