Percona Audit Log Plugin [updated] Official

SET GLOBAL audit_log_format = 'NEW'; -- JSON -- or 'CSV', 'OLD' Automatic rotation (size-based) SET GLOBAL audit_log_rotate_on_size = 104857600; -- 100 MB SET GLOBAL audit_log_rotations = 9; When file reaches 100MB, it becomes audit.log.1 , then audit.log.2 , etc. Total 9 old files kept. Manual rotation SET GLOBAL audit_log_rotate = ON; -- rotates immediately Disable logging temporarily SET GLOBAL audit_log_enabled = OFF; Re-enable SET GLOBAL audit_log_enabled = ON; 📂 Log directory must be writable by mysql user. 7. Performance Considerations | Strategy | Performance Impact | Guarantee | |----------|------------------|------------| | ASYNCHRONOUS | Very low | Best effort | | PERFORMANCE | Low | Might lose few records on crash | | SEMISYNCHRONOUS | Medium | Better durability | | SYNCHRONOUS | High (flushes on every query) | Every query logged |

-- Filtering SET GLOBAL audit_log_include_accounts = 'app_user@%'; SET GLOBAL audit_log_include_commands = 'INSERT,UPDATE,DELETE'; SET GLOBAL audit_log_include_databases = 'prod'; SET GLOBAL audit_log_exclude_commands = ''; percona audit log plugin

-- Verify SHOW VARIABLES LIKE 'audit_log%'; SET GLOBAL audit_log_format = 'NEW'; -- JSON --

Check errors:

SET GLOBAL audit_log_exclude_accounts = 'root@localhost,admin@%'; | Problem | Likely cause | Solution | |---------|--------------|----------| | No logs written | Plugin not loaded | SHOW PLUGINS; – if missing, reinstall | | Log file huge | No filters applied | Set audit_log_exclude_commands = 'SHOW,SELECT' etc. | | Performance drop | SYNCHRONOUS strategy | Change to ASYNCHRONOUS | | Rotation not working | audit_log_rotate_on_size = 0 | Set positive value | | Missing JSON format | Using OLD format | Set audit_log_format = 'NEW' | SET GLOBAL audit_log_include_commands = 'INSERT