检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
How Do I Configure Database Audit? After purchasing a database audit instance, you need to add the database to be audited to the instance and install an agent on the database, application, or proxy side.
How Does Database Audit Process Logs? Database audit logs are stored in a log database and processed based on disk usage.
How Do I Renew Database Audit? You can renew database audit instances before they expire.
Can the Operation Logs of Database Audit Be Migrated? No. Database audit does not support migrating database operation logs. You can view the operation logs of database audit. For details, see How Long Are the Operation Logs of Database Audit Saved by Default? Parent topic: Logs
Operation Guide for Audit Administrators Viewing System Operation Logs Viewing System Device Logs Parent topic: Database Security Encryption Management
Back up audit logs. For details, see Backing Up and Restoring Database Audit Logs.
Which Functions Do the Database Audit Agent Provide? To use database audit, you need to install its agent on database nodes or application nodes.
Can Database Audit Logs Be Directly Saved to OBS? No. Database audit logs are directly saved to the log database. You can back up the logs to Object Storage Service (OBS). For details, see Backing Up Database Audit Logs.
How Do I Check the Version of Database Audit? To check the version of database audit, perform the following steps: Log in to the management console. Select a region, click , and choose Security & Compliance > Database Security Service. The Dashboard page is displayed.
How Do I Renew Database Audit? You can renew database audit instances before they expire.
Viewing Session Distribution After connecting the database to the database audit instance, view session distribution of the database. Prerequisites The database audit instance is in the Running state. For details about how to enable database audit, see Enable Database Audit.
Run the following command to uninstall the agent: sh uninstall.sh If the following information is displayed, the agent has been uninstalled successfully: 1 2 3 4 5 6 7 uninstall audit agent... exist os-release file stopping audit agent audit agent stopped stop audit_agent success
How Do I Run a Database Audit Agent? After a database is successfully added and the audit function is enabled, perform the following steps to run the agent program: Log in to the management console. Select an instance from the Instance drop-down list.
Can I Audit Databases Across Different VPCs? Yes. To audit databases in different VPCs, ensure the VPCs can communicate with each other. You can create peering connections between the VPCs. For details, see Creating a VPC Peering Connection with Another VPC in Your Account.
How Do I Back Up the Database Audit Logs? Database audit supports manual backup and automatic backup. Audit logs are backed up to OBS. Buckets will be automatically created and will incur a separate bill. Perform the following operations to automatically back up audit logs.
Step 5: Enable Database Audit By default, database audit complies with a full audit rule, which is used to audit all databases that are connected to the database audit instance. You can enable audit and check audit results. For details, see Viewing the Audit Dashboard.
How Long Are the Operation Logs of Database Audit Saved by Default? The operation logs of database audit are permanently saved. Parent topic: Logs
How Do I Verify My Database Audit Configuration? To verify your database audit configurations after you enabled audit, perform the following steps: Enter an SQL statement (for example, show databases) in the node where the agent is installed. Log in to the management console.
Parent topic: Audit Instance
Step 2: Enable Database Audit By default, database audit complies with a full audit rule, which is used to audit all databases that are connected to the database audit instance. You can enable audit and check audit results. For details, see Viewing the Audit Dashboard.