My Oracle Support Banner

Usage Of The "audit_log_exclude_accounts" Variable (Doc ID 2314107.1)

Last updated on OCTOBER 04, 2017

Applies to:

MySQL Server - Version 5.6 and later
Information in this document applies to any platform.

Symptoms

To avoid large size audit files, chose to exclude the account which is used by the monitoring, with the audit_log_exclude_accounts variable (dynamically changed, so no restart of the MySQL engine).
Did a stop/start of the monitoring service after this modification.

However, this does not seem to filter these account auditing.

Audit Log:

<AUDIT_RECORD TIMESTAMP="2017-09-28T09:27:31 UTC" RECORD_ID="418843_2017-09-27T00:03:11" NAME="Connect" CONNECTION_ID="316059" STATUS="0" STATUS_CODE="0" USER="user1" OS_LOGIN="" HOST="localhost" IP="127.0.0.1" COMMAND_CLASS="connect" PRIV_USER="user1" PROXY_USER="" DB="mysql"/>
<AUDIT_RECORD TIMESTAMP="2017-09-28T09:27:32 UTC" RECORD_ID="418844_2017-09-27T00:03:11" NAME="Connect" CONNECTION_ID="316060" STATUS="0" STATUS_CODE="0" USER="user1" OS_LOGIN="" HOST="localhost" IP="127.0.0.1" COMMAND_CLASS="connect" PRIV_USER="user1" PROXY_USER="" DB="mysql"/>
<AUDIT_RECORD TIMESTAMP="2017-09-28T09:27:33 UTC" RECORD_ID="418845_2017-09-27T00:03:11" NAME="Connect" CONNECTION_ID="316061" STATUS="0" STATUS_CODE="0" USER="user1" OS_LOGIN="" HOST="localhost" IP="127.0.0.1" COMMAND_CLASS="connect" PRIV_USER="user1" PROXY_USER="" DB="mysql"/>
<AUDIT_RECORD TIMESTAMP="2017-09-28T09:27:34 UTC" RECORD_ID="418846_2017-09-27T00:03:11" NAME="Connect" CONNECTION_ID="316062" STATUS="0" STATUS_CODE="0" USER="user1" OS_LOGIN="" HOST="localhost" IP="127.0.0.1" COMMAND_CLASS="connect" PRIV_USER="user1" PROXY_USER="" DB="mysql"/>
<AUDIT_RECORD TIMESTAMP="2017-09-28T09:27:35 UTC" RECORD_ID="418847_2017-09-27T00:03:11" NAME="Connect" CONNECTION_ID="316063" STATUS="0" STATUS_CODE="0" USER="user1" OS_LOGIN="" HOST="localhost" IP="127.0.0.1" COMMAND_CLASS="connect" PRIV_USER="user1" PROXY_USER="" DB="mysql"/>
<AUDIT_RECORD TIMESTAMP="2017-09-28T09:27:36 UTC" RECORD_ID="418848_2017-09-27T00:03:11" NAME="Connect" CONNECTION_ID="316064" STATUS="0" STATUS_CODE="0" USER="user1" OS_LOGIN="" HOST="localhost" IP="127.0.0.1" COMMAND_CLASS="connect" PRIV_USER="user1" PROXY_USER="" DB="mysql"/>
<AUDIT_RECORD TIMESTAMP="2017-09-28T09:27:37 UTC" RECORD_ID="418849_2017-09-27T00:03:11" NAME="Connect" CONNECTION_ID="316065" STATUS="0" STATUS_CODE="0" USER="user1" OS_LOGIN="" HOST="localhost" IP="127.0.0.1" COMMAND_CLASS="connect" PRIV_USER="user1" PROXY_USER="" DB="mysql"/>
<AUDIT_RECORD TIMESTAMP="2017-09-28T09:27:38 UTC" RECORD_ID="418850_2017-09-27T00:03:11" NAME="Connect" CONNECTION_ID="316066" STATUS="0" STATUS_CODE="0" USER="user1" OS_LOGIN="" HOST="localhost" IP="127.0.0.1" COMMAND_CLASS="connect" PRIV_USER="user1" PROXY_USER="" DB="mysql"/>
<AUDIT_RECORD TIMESTAMP="2017-09-28T09:27:39 UTC" RECORD_ID="418851_2017-09-27T00:03:11" NAME="Connect" CONNECTION_ID="316067" STATUS="0" STATUS_CODE="0" USER="user1" OS_LOGIN="" HOST="localhost" IP="127.0.0.1" COMMAND_CLASS="connect" PRIV_USER="user1" PROXY_USER="" DB="mysql"/>

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.