Database – SGBox Next Generation SIEM & SOAR https://www.sgbox.eu Next Generation SIEM & SOAR Tue, 05 Nov 2024 10:44:02 +0000 en-US hourly 1 https://wordpress.org/?v=6.7.1 https://www.sgbox.eu/wp-content/uploads/2020/09/cropped-Logo-SGBox-Trasparente-NO-SCRITTA-150x150.webp Database – SGBox Next Generation SIEM & SOAR https://www.sgbox.eu 32 32 MariaDB – Enable audit log https://www.sgbox.eu/en/knowledge-base/mariadb-enable-audit-log/ Thu, 29 Sep 2022 07:20:58 +0000 http://10.253.1.91/?post_type=epkb_post_type_1&p=7415 Enable Audit login

to enable the global logging feature you must execute this command as query inside database:

SET GLOBAL general_log = 'on'

Enable Advanced Audit

Inside the DB you must execute these commands as query inside database in order to enable the full audit feature:

INSTALL SONAME 'server_audit';
SET GLOBAL server_audit_logging=ON;
SET GLOBAL server_audit_events = 'CONNECT,QUERY,TABLE';
SET GLOBAL server_audit_output_type = 'SYSLOG';

This will enable the correct plugin to record the advanced MariaDB audit

Check Configuration Audit

To check the correct application of the configuration, you can execute this query:

SHOW GLOBAL VARIABLES LIKE 'server_audit%';

Disable Audit

In case you need to disable the audit of the logs, you need to execute this command:

UNINSTALL SONAME 'server_audit';

Official Documentation Reference

]]>