TiDB Audit Plugin User Guide August 4, 2022 TiDB Audit Plugin User Guide Introduction The TiDB audit plugin records the TiDB server’s activities that are expected to follow auditing regulations of of your organization. For each client session, the plugin records users accessing the server (that is, username and IP address), SQL queries executed, databases and tables accessed, environment variable package, and use the audit plugin. Download the plugin You can download the plugin on TiDB Enterprise Edition Downloads. Deploy the audit plugin After downloading the plugin, you can use either TiDB

Experimental Experimental Columnar storage (TiFlash) Y Y Y Y Y Y Y Y RocksDB engine Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Invisible indexes Y Y Y Y Y Y Y N 1TiDB incorrectly treats latin1 as a subset of JDK 17 from OpenJDK. 4.3.2.3 Step 3: Install Maven This sample application uses Apache Maven to manage the application’s dependencies. Spring supports Maven 3.3 and later versions. As dependency management stable version of Maven is recommended. To install Maven from the command line. • macOS: brew install maven • Debian-based Linux distributions (such as Ubuntu): apt-get install maven • Red Hat-based

OpenJDK 。 4.3.2.3 第 3 步：安装 Maven 此示例应用程序使用 Maven 来管理应用程序的依赖项。Spring 支持的 Maven 版本为 3.2 以上，作为依赖管理软 件，推荐使用当前最新稳定版本的 Maven。 这里给出命令行安装 Maven 的办法： • macOS 安装： brew install maven • 基于 Debian 的 Linux 发行版上安装（如 发行版上安装（如 Ubuntu 等）： apt-get install maven • 基于 Red Hat 的 Linux 发行版上安装（如 Fedora、CentOS 等）： • dnf 包管理器 dnf install maven • yum 包管理器 yum install maven 其他安装方法，请参考 Maven 官方文档。 4.3.2.4 第 4 步：获取应用程序代码 建议： impl │ └ ─ ─ PlayerServiceImpl.java └ ─ ─ resources └ ─ ─ application.yml 其中： • pom.xml 内声明了项目的 Maven 配置，如依赖，打包等 • application.yml 内声明了项目的用户配置，如数据库地址、密码、使用的数据库方言等 • App.java 是项目的入口 • controller 是项目对外暴露

FastScan to accelerate queries in OLAP scenarios E N N N N N N N RocksDB engine Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E Use buckets to improve scan concurrency E E N higher. You can choose OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: higher. You can choose OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows:

Fix the issue that TiDB server might consume a significant amount of resources when the enterprise plugin for audit logging is used #49273 @lcwangchao • Fix the issue that the optimizer incorrectly converts accelerate queries in OLAP scenarios Y Y Y E N N N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E E Use buckets to improve scan concurrency higher. You can choose OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows:

accelerate queries in OLAP scenarios Y Y E N N N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E Use buckets to improve scan concurrency higher. You can choose OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: higher. You can choose OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows:

g �→ Deleted This vari- able is re- named to tidb_enable_dist_task �→ . default_authentication_plugin �→ Modified Introduces two new value op- tions: authentication_ldap_sasl �→ and authentication_ldap_simple Description authentication_ldap_sasl_tls �→ Newly added Specifies whether connec- tions by the plugin to the LDAP server are pro- tected with Start- TLS in LDAP SASL authen- tica- tion. authenticat Description authentication_ldap_simple_tls �→ Newly added Specifies whether connec- tions by the plugin to the LDAP server are pro- tected with Start- TLS in LDAP simple authen- tica- tion. 61 Variable

queries in OLAP scenarios Y Y Y Y Y Y E N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E E E Use buckets to improve scan concurrency higher. You can choose OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: higher. You can choose OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows:

accelerate queries in OLAP scenarios Y Y Y Y Y E N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E E Use buckets to improve scan concurrency higher. You can choose OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: higher. You can choose OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows:

queries in OLAP scenarios Y Y Y Y Y Y E N N N N N RocksDB engine Y Y Y Y Y Y Y Y Y Y Y Y Titan plugin Y Y Y Y Y Y Y Y Y Y Y Y Titan Level Merge E E E E E E E E E E E E Use buckets to improve scan concurrency higher. You can choose OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: higher. You can choose OpenJDK or Oracle JDK based on your business and personal requirements. • Maven 3.8 or higher. • Git. • A TiDB cluster. If you don’t have a TiDB cluster, you can create one as follows: