TiDB Audit Plugin User Guide August 4, 2022 TiDB Audit Plugin User Guide Introduction The TiDB audit plugin records the TiDB server’s activities that are expected to follow auditing regulations of of your organization. For each client session, the plugin records users accessing the server (that is, username and IP address), SQL queries executed, databases and tables accessed, environment variable package, and use the audit plugin. Download the plugin You can download the plugin on TiDB Enterprise Edition Downloads. Deploy the audit plugin After downloading the plugin, you can use either TiDB

password Password of the user as the database owner. When using the Legacy_Auth authentication plugin, only the first 8 characters are used. Case-sensitive rolename The name of the role whose rights DEFAULT CHARACTER SET charset Chapter 5. Data Definition (DDL) Statements 110 | {ENCRYPT WITH plugin_name [KEY key_name] | DECRYPT} | SET LINGER TO linger_duration | DROP LINGER | SET DEFAULT Duration of linger delay in seconds; must be greater than or equal to 0 (zero) plugin_name The name of the encryption plugin Chapter 5. Data Definition (DDL) Statements 111 Parameter Description key_name

-> (name in config) plugin-notifications notifications { core: { [core package name]: { [property name]: [property value] }, ... }, plugin: { [plugin package name]: { childrenLimit: 500, editing: true, deleting: true } }, plugin: { 'sql-editor': { maxFileSize: 100 }, notifications: { { ... 'plugin.log-viewer.refreshTimeout': 3000, 'plugin.log-viewer.maxLogRecords': 1000, 'plugin.log-viewer.logBatchSize': 2000, 'plugin.log-viewer.maxFailedRequests': 3, 'plugin.data-export

Storage Plugin with gpbackup and gprestore 560 Using the S3 Storage Plugin with gpbackup and gprestore 0 Prerequisites 560 Installing the S3 Storage Plugin 560 Using the S3 Storage Plugin 560 S3 Storage Storage Plugin Configuration File Format 562 VMware Greenplum v6.18 Documentation VMware, Inc. 30 Using the DD Boost Storage Plugin with gpbackup, gprestore, and gpbackup_manager 564 Using the DD Boost Boost Storage Plugin with gpbackup, gprestore, and gpbackup_manager 0 DD Boost Storage Plugin Configuration File Format 564 Examples 567 Notes 568 Replicating Backups 568 Replicating Backups 0 Replicate

Storage Plugin with gpbackup and gprestore 569 Using the S3 Storage Plugin with gpbackup and gprestore 0 Prerequisites 569 Installing the S3 Storage Plugin 569 Using the S3 Storage Plugin 569 S3 Storage Storage Plugin Configuration File Format 571 VMware Greenplum v6.19 Documentation VMware, Inc. 31 Using the DD Boost Storage Plugin with gpbackup, gprestore, and gpbackup_manager 573 Using the DD Boost Boost Storage Plugin with gpbackup, gprestore, and gpbackup_manager 0 DD Boost Storage Plugin Configuration File Format 573 Examples 576 Notes 577 Replicating Backups 577 Replicating Backups 0 Replicate

Storage Plugin with gpbackup and gprestore 492 Using the S3 Storage Plugin with gpbackup and gprestore 0 Prerequisites 492 Installing the S3 Storage Plugin 492 Using the S3 Storage Plugin 492 S3 Storage Storage Plugin Configuration File Format 494 Using the DD Boost Storage Plugin with gpbackup, gprestore, and gpbackup_manager 496 VMware Greenplum v6.17 Documentation VMware, Inc. 26 Using the DD Boost Boost Storage Plugin with gpbackup, gprestore, and gpbackup_manager 0 DD Boost Storage Plugin Configuration File Format 496 Examples 499 Notes 500 Replicating Backups 500 Replicating Backups 0 Replicate

in config) plugin-notifications (package name) -> notifications (name in config) { core: { [core package name]: { [property name]: [property value] }, ... }, plugin: { [plugin childrenLimit: 500, editing: true, deleting: true } }, plugin: { 'sql-editor': { maxFileSize: 100 }, notifications: { { ... 'plugin.log-viewer.refreshTimeout': 3000, 'plugin.log-viewer.maxLogRecords': 1000, 'plugin.log-viewer.logBatchSize': 2000, 'plugin.log-viewer.maxFailedRequests': 3, 'plugin.data-export

-> (name in config) plugin-notifications notifications { core: { [core package name]: { [property name]: [property value] }, ... }, plugin: { [plugin package name]: { childrenLimit: 500, editing: true, deleting: true } }, plugin: { 'sql-editor': { maxFileSize: 100 }, notifications: { { ... 'plugin.log-viewer.refreshTimeout': 3000, 'plugin.log-viewer.maxLogRecords': 1000, 'plugin.log-viewer.logBatchSize': 2000, 'plugin.log-viewer.maxFailedRequests': 3, 'plugin.data-export

-> (name in config) plugin-notifications notifications { core: { [core package name]: { [property name]: [property value] }, ... }, plugin: { [plugin package name]: { childrenLimit: 500, editing: true, deleting: true } }, plugin: { 'sql-editor': { maxFileSize: 100 }, notifications: { { ... 'plugin.log-viewer.refreshTimeout': 3000, 'plugin.log-viewer.maxLogRecords': 1000, 'plugin.log-viewer.logBatchSize': 2000, 'plugin.log-viewer.maxFailedRequests': 3, 'plugin.data-export

DEFAULT CHARACTER SET charset | SET LINGER TO linger_duration | DROP LINGER | {ENCRYPT WITH plugin_name [KEY key_name] | DECRYPT} ::= ADD [ ...] linger_duration Dauer der linger Verzögerung in Sekunden; muss größer oder gleich 0 (null) sein plugin_name Der Name des Verschlüsselungs-Plugins key_name Der Name des Verschlüsselungsschlüssels Die linger-verzögerung von 30 Sekunden ALTER DATABASE SET LINGER TO 30; 8. Verschlüsseln der Datenbank mit einem Plugin namens DbCrypt Chapter 5. Anweisungen der Datendefinitionssprache (DDL) 103 ALTER DATABASE ENCRYPT