TiDB Audit Plugin User Guide August 4, 2022 TiDB Audit Plugin User Guide Introduction The TiDB audit plugin records the TiDB server’s activities that are expected to follow auditing regulations of of your organization. For each client session, the plugin records users accessing the server (that is, username and IP address), SQL queries executed, databases and tables accessed, environment variable package, and use the audit plugin. Download the plugin You can download the plugin on TiDB Enterprise Edition Downloads. Deploy the audit plugin After downloading the plugin, you can use either TiDB

Fix the issue that TiDB server might consume a significant amount of resources when the enterprise plugin for audit logging is used #49273 @lcwangchao • Fix the issue that the optimizer incorrectly converts accelerate queries in OLAP scenarios Y Y Y E N N N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E E Use buckets to improve scan concurrency OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: • (Recommended)

queries in OLAP scenarios Y Y Y Y Y Y E N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E E E Use buckets to improve scan concurrency OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: • (Recommended) in your terminal window to clone the sample code reposi- tory: git clone https://github.com/tidb-samples/tidb-java-jdbc-quickstart.git cd tidb-java-jdbc-quickstart Step 2: Configure connection information

queries in OLAP scenarios Y Y Y Y Y Y E N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E E E Use buckets to improve scan concurrency OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: • (Recommended) in your terminal window to clone the sample code reposi- tory: git clone https://github.com/tidb-samples/tidb-java-jdbc-quickstart.git cd tidb-java-jdbc-quickstart Step 2: Configure connection information

accelerate queries in OLAP scenarios Y Y E N N N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E Use buckets to improve scan concurrency OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: • (Recommended) in your terminal window to clone the sample code reposi- tory: git clone https://github.com/tidb-samples/tidb-java-jdbc-quickstart.git cd tidb-java-jdbc-quickstart Step 2: Configure connection information

g �→ Deleted This vari- able is re- named to tidb_enable_dist_task �→ . default_authentication_plugin �→ Modified Introduces two new value op- tions: authentication_ldap_sasl �→ and authentication_ldap_simple Description authentication_ldap_sasl_tls �→ Newly added Specifies whether connec- tions by the plugin to the LDAP server are pro- tected with Start- TLS in LDAP SASL authen- tica- tion. authenticat Description authentication_ldap_simple_tls �→ Newly added Specifies whether connec- tions by the plugin to the LDAP server are pro- tected with Start- TLS in LDAP simple authen- tica- tion. 61 Variable

FastScan to accelerate queries in OLAP scenarios E N N N N N N N RocksDB engine Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E Use buckets to improve scan concurrency E E N OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: • (Recommended) in your terminal window to clone the sample code reposi- tory: git clone https://github.com/tidb-samples/tidb-java-jdbc-quickstart.git cd tidb-java-jdbc-quickstart Step 2: Configure connection information

accelerate queries in OLAP scenarios Y Y Y Y Y E N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E E Use buckets to improve scan concurrency OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: • (Recommended) in your terminal window to clone the sample code reposi- tory: git clone https://github.com/tidb-samples/tidb-java-jdbc-quickstart.git cd tidb-java-jdbc-quickstart Step 2: Configure connection information

to accelerate queries in OLAP scenarios Y Y Y E N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E Use buckets to improve scan concurrency E OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: • (Recommended) in your terminal window to clone the sample code reposi- tory: git clone https://github.com/tidb-samples/tidb-java-jdbc-quickstart.git cd tidb-java-jdbc-quickstart Step 2: Configure connection information

to reject unauthenticated user connections in some cases when using the auth_socket authentication plugin #54031 @lcwangchao • Fix the issue that JSON-related functions return errors inconsistent with MySQL accelerate queries in OLAP scenarios Y Y Y Y E N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E Use buckets to improve scan concurrency OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: • (Recommended)