华为云首页用户手册

云日志服务 LTS-云数据库RDS for MySQL接入LTS:MYSQL审计日志结构化模板日志详情

时间：2024-07-04 10:52:15

云日志服务 LTS

MYSQL审计日志结构化模板日志详情

MYSQL审计日志示例

表5 结构化模板示例
模板名称	示例日志
MYSQL审计日志	{"logType":"audit_log","instanceId":"e2a8db82a9d74982a6021c6758d57e00in01","nodeId":"633a1f5a3db9445586f297f9c026b91bno01","record_id":"2","connection_id":"112","connection_status":"0","name":"Query","timestamp":"2023-01-06T06:35:46 UTC","command_class":"show_tables","sqltext":"show tables","user":"root[root] @ [10.58.239.247]","host":"","external_user":"","ip":"10.58.239.247","default_db":""}

表5 结构化模板示例

模板名称

示例日志

MYSQL审计日志

{"logType":"audit_log","instanceId":"e2a8db82a9d74982a6021c6758d57e00in01","nodeId":"633a1f5a3db9445586f297f9c026b91bno01","record_id":"2","connection_id":"112","connection_status":"0","name":"Query","timestamp":"2023-01-06T06:35:46 UTC","command_class":"show_tables","sqltext":"show tables","user":"root[root] @  [10.58.239.247]","host":"","external_user":"","ip":"10.58.239.247","default_db":""}

结构化字段及字段说明

表6 结构化字段
字段	示例	描述	类型
logType	audit_log	日志类型	string
instanceId	e2a8db82a9d74982a6021c6758d57e00in01	实例Id	string
nodeId	633a1f5a3db9445586f297f9c026b91bno01	节点Id	string
record_id	2	审计日志单条记录的记录ID，记录审计日志的每条SQL的唯一global id	string
connection_id	112	该条记录执行的会话ID，与show processlist中的ID一致	string
connection_status	0	会话状态，常见为执行语句的错误返回码，普通执行成功返回0	string
name	Query	记录类型名称，通常情况下dml，ddl操作均为QUERY，连接断开为CONNECT和QUIT	string
timestamp	2023-01-06T06:35:46 UTC	记录的UTC时间	string
command_class	show_tables	执行的SQL命令类型，内部为解析得到的SQL类型，例如select，update（连接断开不存在该项）	string
sqltext	show tables	执行的SQL具体内容（连接断开审计不存在该项）	string
user	root[root] @ [10.58.239.247]	登录的账户	string
host	-	登录的host，当本地登录时为localhost，远程登录为空	string
external_user	-	代理用户名称	string
ip	10.58.239.247	通过远程连接的客户端IP，本地连接为空	string
default_db	-	执行SQL时默认的数据库	string