检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
SQLSTATE: 42501 Description: You have no permission to modify audit administrators. Solution: Modify audit administrators as a system administrator. GAUSS-00598: "Must be initial account to alter systemadmin users."
SQLSTATE: 42501 Description: You have no permission to create audit administrators. Solution: Create audit administrators as a system administrator. GAUSS-00578: "Must be system admin to create sysadmin users."
Solution:contact technical support GAUSS-00493: "permission denied to query audit" SQLSTATE: 42501 Description: Internal system error. Solution:contact technical support GAUSS-00494: "permission denied to delete audit" SQLSTATE: 42501 Description: Internal system error.
DWSAccessOBS OBS Administrator Audit log dump: reports audit logs to OBS buckets. DWSAccessKMS KMS Administrator Used to query and rotate keys in a KMS encrypted cluster.
Nodes Adding CN Nodes in Batches Deleting CN Nodes in Batches Querying a Cluster Parameter Group Querying Cluster Parameter Settings Modifying Parameter Settings of a Cluster Querying Snapshot Statistics Querying the Nodes to Be Removed for Scale-In Querying Parameter Modification Audit
This function has been deprecated. pg_delete_audit Deletes audit logs. This function has been deprecated.
You can view audit logs to locate the cause of account locking. For details, see Account Still Locked After Password Resetting. Method for Unlocking the Administrator (dbadmin by Default) You can log in to the GaussDB(DWS) management console to reset the administrator password.
It is not available for other users. rolcanlogin boolean N/A Whether the role can log in to the database rolreplication boolean N/A Whether the role can be replicated rolauditadmin boolean N/A Whether the role is an audit system administrator rolsystemadmin boolean N/A Whether the
Solution:contact technical support GAUSS-00488: "could not write to audit file: %m" SQLSTATE: XX000 Description: Internal system error.
The following log types are supported: CN logs, DN logs, OS messages logs, audit logs, cms logs, gtm logs, Roach client logs, Roach server logs, upgrade logs, and scale-out logs. Only 8.1.1.300 and later versions support cluster log management.
Audit Logs GaussDB(DWS) can be integrated with Cloud Trace Service (CTS) to audit management console operations and API calls. For details, see Viewing Audit Logs of Key Operations on the Management Console.
Developer Guide > Database Security Management > Database Audit > Querying Audit Results User Guide > Audit Logs > Database Audit Logs > Viewing Database Audit Logs Developer Guide > GUC Parameters> Auditing> Audit Switch Certain user operations can be allowed in security mode.
SQLSTATE: XX000 Description: pg_auth_history is used to audit username and password changes. Related changes are recorded only when the username and password in pg_authid are changed. Any changes on the record will affect the auditing.
CTS GaussDB(DWS) uses Cloud Trace Service (CTS) to audit your non-query operations on the management console to ensure that no invalid or unauthorized operations are performed, enhancing service security management.
boolean Whether a role can log in, that is, whether a role can be given as the initial session authorization identifier. rolreplication boolean Indicates that the role is a replicated one (an adaptation syntax and no actual meaning). rolauditadmin boolean Indicates that the role is an audit
Viewing Audit Logs to Check the Users Who Have Modified Service Data Database audit logs record users' daily activities, including accessing and modifying service data.
The pg_query_audit_details() function is added for viewing audit logs and parsing the object_name and object_details fields in audit logs from the JSON format.
In addition, detail_info is used to store the command execution results instead of commands, which have been moved to command_text. 68 login_audit_messages Enhanced the audit log feature.
generation 223 Plan Cache 224 Analyze 225 utile Interface 226 Actuator Row Execution Engine 231 Vectorized Execution Engine 232 Executing Diagnostic Information 233 LLVM 234 Distributed Framework 235 RemoteQuery 236 Explain 237 Security Certificates 241 Authorizes 242 Encryptes 243 Audit
However, do not grant user1 the system administrator and audit administrator permissions, and do not limit the number of connections.
