数据库的审计日志占用大量空间,当时是为了测试审计功能开启的,现在需要关闭 # /data/mysql_data]# du -sh *
124G audit.log # 查询审计相关参数
mysql> show variables like '%audit%';
+-----------------------------+---------------+
| Variable_name | Value |
+-----------------------------+---------------+
| audit_log_buffer_size | |
| audit_log_exclude_accounts | |
| audit_log_exclude_commands | |
| audit_log_exclude_databases | |
| audit_log_file | audit.log |
| audit_log_flush | OFF |
| audit_log_format | OLD |
| audit_log_handler | FILE |
| audit_log_include_accounts | |
| audit_log_include_commands | |
| audit_log_include_databases | |
| audit_log_policy | QUERIES |
| audit_log_rotate_on_size | |
| audit_log_rotations | |
| audit_log_strategy | ASYNCHRONOUS |
| audit_log_syslog_facility | LOG_USER |
| audit_log_syslog_ident | percona-audit |
| audit_log_syslog_priority | LOG_INFO |
+-----------------------------+---------------+
rows in set (0.00 sec) mysql> show variables like 'plugin_dir';
+---------------+----------------------------------------------------+
| Variable_name | Value |
+---------------+----------------------------------------------------+
| plugin_dir | /usr/local/percona-server-5.7./lib/mysql/plugin/ |
+---------------+----------------------------------------------------+
row in set (0.00 sec) # 查看插件
# ls /usr/local/percona-server-5.7./lib/mysql/plugin/
adt_null.so daemon_example.ini keyring_udf.so libmurmur_udf.so libtest_session_info.so libtest_sql_commit.so libtest_sql_replication.so libtest_x_sessions_deinit.so mysqlx.so replication_observers_example_plugin.so semisync_slave.so
audit_log.so debug libdaemon_example.so libtest_framework.so libtest_session_in_thd.so libtest_sql_complex.so libtest_sql_shutdown.so libtest_x_sessions_init.so qa_auth_client.so rewrite_example.so test_security_context.so
auth.so ha_example.so libfnv1a_udf.so libtest_services.so libtest_sql_2_sessions.so libtest_sql_errors.so libtest_sql_sqlmode.so locking_service.so qa_auth_interface.so rewriter.so test_udf_services.so
auth_socket.so innodb_engine.so libfnv_udf.so libtest_services_threaded.so libtest_sql_all_col_types.so libtest_sql_lock.so libtest_sql_stored_procedures_functions.so mypluglib.so qa_auth_server.so scalability_metrics.so validate_password.so
auth_test_plugin.so keyring_file.so libmemcached.so libtest_session_detach.so libtest_sql_cmds_1.so libtest_sql_processlist.so libtest_sql_views_triggers.so mysql_no_login.so query_response_time.so semisync_master.so version_token.so 关闭方法:
# https://www.percona.com/blog/2015/09/10/percona-server-audit-log-plugin-best-practices/
变量audit_log_policy可以设置为NONE以停止系统上的日志记录。如果这是永久性更改,请将该值添加到my.cnf文件中。 # 使用下面这条命令,就可以关闭审计日志功能
set global audit_log_policy=none;