TiDB Audit Plugin User Guide August 4, 2022 TiDB Audit Plugin User Guide Introduction The TiDB audit plugin records the TiDB server’s activities that are expected to follow auditing regulations of of your organization. For each client session, the plugin records users accessing the server (that is, username and IP address), SQL queries executed, databases and tables accessed, environment variable package, and use the audit plugin. Download the plugin You can download the plugin on TiDB Enterprise Edition Downloads. Deploy the audit plugin After downloading the plugin, you can use either TiDB

1 Table of Contents Introduction 1 Differences between database auditing and the audit plugin 1 Obtain the database auditing feature 2 The range of database auditing 2 The events of database auditing audit_log_disable_rule 19 Dynamic privileges 20 AUDIT_ADMIN 20 RESTRICTED_AUDIT_ADMIN 20 Migration from audit plugin to database auditing 20 TiDB Database Auditing User Guide Introduction Database auditing is an legacy audit plugin (hereinafter referred to as "audit plugin"). This article describes how to use Database Auditing in TiDB. Differences between database auditing and the audit plugin Database Auditing

this time period. • The default storage directory for plugins is changed from "" to /data/deploy/plugin. • The DM code is migrated to the folder “dm” in TiCDC code repository. Now DM follows TiDB in version transactions’ statements are not included in TIDB_TRX #28670 – Fix the wrong default value of the plugin_dir configuration #28084 – Fix the issue that the CONVERT_TZ function returns NULL when it is given Experimental Experimental Columnar storage (TiFlash) Y Y Y Y Y RocksDB engine Y Y Y Y Y Titan plugin Y Y Y Y Y Invisible indexes Y Y Y Y N Composite PRIMARY KEY Y Y Y Y Y Unique indexes Y Y Y Y Y

version. 2.2.1.1 System variables Variable name Change type Description default_authentication_plugin �→ Newly added Sets the au- thentication method that the server advertises. The default value is Experimental Experimental Experimental Columnar storage (TiFlash) Y Y Y Y RocksDB engine Y Y Y Y Titan plugin Y Y Y Y Invisible indexes Y Y Y N Composite PRIMARY KEY Y Y Y Y Unique indexes Y Y Y Y Clustered rocksdb.lockcf.level0-stop-writes-trigger 12.2.3 Titan Overview Titan is a high-performance RocksDB plugin for key-value separation. Titan can reduce write amplification in RocksDB when large values are used

Experimental Experimental Experimental Columnar storage (TiFlash) Y Y Y Y RocksDB engine Y Y Y Y Titan plugin Y Y Y Y Invisible indexes Y Y Y N Composite PRIMARY KEY Y Y Y Y Unique indexes Y Y Y Y Clustered rocksdb.lockcf.level0-stop-writes-trigger 12.2.3 Titan Overview Titan is a high-performance RocksDB plugin for key-value separation. Titan can reduce write amplification in RocksDB when large values are used of RocksDB. If you want to improve the performance of Titan, see the blog post Titan: A RocksDB Plugin to Reduce Write Amplification. 12.2.3.4 Architecture and implementation The following figure shows

Fix the issue that TiDB server might consume a significant amount of resources when the enterprise plugin for audit logging is used #49273 @lcwangchao • Fix the issue that the optimizer incorrectly converts accelerate queries in OLAP scenarios Y Y Y E N N N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E E Use buckets to improve scan concurrency use DataGrip in two ways: • As the DataGrip IDE standalone tool. • As the Database Tools and SQL plugin in JetBrains IDEs, such as IntelliJ, PhpStorm, and PyCharm. This tutorial mainly focuses on the

Experimental Experimental Columnar storage (TiFlash) Y Y Y Y Y Y Y Y RocksDB engine Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Invisible indexes Y Y Y Y Y Y Y N 1TiDB incorrectly treats latin1 as a subset of <plugin> org.springframework.boot spring-boot-maven-plugin plugin> 181 User popular open-source Java class persistence framework. The following uses MyBatis Generator as a Maven plugin to generate the persistence layer code. Change to the plain-java-mybatis directory: cd plain-java-mybatis

accelerate queries in OLAP scenarios Y Y E N N N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E Use buckets to improve scan concurrency DataGrip in two ways: • As the DataGrip IDE standalone tool. 250 • As the Database Tools and SQL plugin in JetBrains IDEs, such as IntelliJ, PhpStorm, and PyCharm. This tutorial mainly focuses on the standalone DataGrip IDE. The steps of connecting to TiDB using the JetBrains Database Tools and SQL plugin in JetBrains IDEs are similar. You can also follow the steps in this document for reference when

queries in OLAP scenarios Y Y Y Y Y Y E N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E E E Use buckets to improve scan concurrency DataGrip in two ways: 285 • As the DataGrip IDE standalone tool. • As the Database Tools and SQL plugin in JetBrains IDEs, such as IntelliJ, PhpStorm, and PyCharm. This tutorial mainly focuses on the standalone DataGrip IDE. The steps of connecting to TiDB using the JetBrains Database Tools and SQL plugin in JetBrains IDEs are similar. You can also follow the steps in this document for reference when

accelerate queries in OLAP scenarios Y Y Y Y Y E N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E E Use buckets to improve scan concurrency DataGrip in two ways: • As the DataGrip IDE standalone tool. 258 • As the Database Tools and SQL plugin in JetBrains IDEs, such as IntelliJ, PhpStorm, and PyCharm. This tutorial mainly focuses on the standalone DataGrip IDE. The steps of connecting to TiDB using the JetBrains Database Tools and SQL plugin in JetBrains IDEs are similar. You can also follow the steps in this document for reference when