GBase 8a 审计日志开启/关闭

1、开启审计日志
set global audit_log=1;
- 只记录test库下表的select 操作记录。
CREATE AUDIT POLICY audit_policy_1(Enable = 'Y',Sql_commands='select',Db='test');
select * from gbase.audit_policy;

2、设置审计日志存储策略为文本保存模式，执行查询
set global log_output='file';
select * from test.t1;

3、关闭审计日志
set global audit_log=0;

审计策略设置
-- 调回参数，创建用户
gccli -uroot -vvv -e"alter audit policy audit_policy_1 set long_query_time = 0;"
gccli -uroot -vvv -e"create user user1 identified by 'User#666';"
gccli -uroot -vvv -e"create user user2 identified by 'User#666';"
gccli -uroot -vvv -e"grant all on test.* to user1;"
gccli -uroot -vvv -e"grant all on test.* to user2;"
-- 设置审计策略项
gccli -uroot -vvv -e"create audit policy audit_user1(User='user1',Sql_commands='select,update,delete',Db='test');"
gccli -uroot -vvv -e"create audit policy audit_user2(User='user2',Sql_commands='CREATE_TABLE,DROP_TABLE',Db='test');"
-- 使用USER1执行INSERT、UPDATE、DELETE、SELECT操作
gccli -uuser1 -p'User#666' -vvv -e"insert into test.t values(4,'d');"
gccli -uuser1 -p'User#666' -vvv -e"update test.t set b='e' where a=4;"
gccli -uuser1 -p'User#666' -vvv -e"delete from test.t where a=4;"
gccli -uuser1 -p'User#666' -vvv -e"select * from test.t where a=1;"
-- 使用USER2执行CREATE_TABLE、INSERT、SELECT、DROP_TABLE操作
gccli -uuser2 -p'User#666' -Dtest -vvv -e"create table t_new(a int);"
gccli -uuser2 -p'User#666' -vvv -e"insert into test.t_new values(1);"
gccli -uuser2 -p'User#666' -vvv -e"select * from test.t_new;"
gccli -uuser2 -p'User#666' -vvv -e"drop table test.t_new;"
-- 查询审计日志表
gccli -uroot -vvv -e"select * from gbase.audit_log where user like 'user1';"
gccli -uroot -vvv -e"select * from gbase.audit_log where user like 'user2';"

#结束
gccli -uroot -vvv -e"set global audit_log=0;"
gccli -uroot
DROP AUDIT POLICY audit_policy_1;
DROP AUDIT POLICY audit_user1;
DROP AUDIT POLICY audit_user2;
TRUNCATE SELF gbase.audit_log;
drop user user1;
drop user user2;
drop database test;
\q