vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/dws/umn/dws_01_0183.html
Lu, Huayi 95132e24fc DWS UMN 830.201_new version 
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com>
Reviewed-by: Rechenburg, Matthias <matthias.rechenburg@t-systems.com>
Co-authored-by: Lu, Huayi <luhuayi@huawei.com>
Co-committed-by: Lu, Huayi <luhuayi@huawei.com>
2024-05-27 11:54:34 +00:00

86 lines
35 KiB
HTML
Raw Blame History

<a name="EN-US_TOPIC_0000001707254701"></a><a name="EN-US_TOPIC_0000001707254701"></a>
<h1 class="topictitle1">Viewing Database Audit Logs</h1>
<div id="body8662426"><div class="section" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_s41155369055148f8a187cad84a095c90"><h4 class="sectiontitle">Prerequisites</h4><ul id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_ueff9db0a281f418bbdae59d347abd23c"><li id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_le9ddf22ec7454f23a7b61fbfddc14568">The audit function has been enabled by setting <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_b749117105490">audit_enabled</strong>. The default value of <strong id="EN-US_TOPIC_0000001707254701__b15709182274418">audit_enabled</strong> is <strong id="EN-US_TOPIC_0000001707254701__b1709022144410">ON</strong>. To disable audit, set it to <strong id="EN-US_TOPIC_0000001707254701__b12709122124411">OFF</strong> by referring to <a href="dws_01_0152.html">Modifying Database Parameters</a>.</li><li id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_l7db1402c878d42ae851040c6550f86d5">The audit items have been configured. For details about how to enable audit items, see <a href="dws_01_0075.html">Configuring the Database Audit Logs</a>.</li><li id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_l2c5026d0210f4af7ae30541634ba0269">The database is running properly and a series of addition, modification, deletion, and query operations have been executed in the database. Otherwise, no audit result is generated.</li><li id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_l1d3cf613ce5049538cdeb1f1580fd335">The audit logs of each database node are recorded separately.</li><li id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_li12305316175719">Only users with the <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_b713117051614">AUDITADMIN</strong> permission can view audit records.</li></ul>
</div>
<div class="section" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_section7300165015277"><h4 class="sectiontitle">Viewing Database Audit Logs</h4><p id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_p1148160163117">Method 1: Audit logs will occupy disk space. To prevent excessive disk usage, GaussDB(DWS) supports audit log dumping. You can enable the <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_b742922155914">Log Dump</strong> function to dump audit logs to OBS (you need to create an OBS bucket for storing audit logs first). For details about how to view the dumped logs, see <a href="dws_01_0142.html#EN-US_TOPIC_0000001658895326__en-us_topic_0000001372520098_en-us_topic_0000001145696613_section1227433741613">Viewing Audit Log Dumps</a>.</p>
<p id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_p8148404314">Method 2: Use the <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_b134074285566">Log</strong> function of LTS to view or download the collected database audit logs. For details, see <a href="dws_01_01111.html#EN-US_TOPIC_0000001707293933__en-us_topic_0000001372999362_section1600157575">Checking Cluster Logs</a>.</p>
<p id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_p71481901312">Method 3: Database audit logs are stored in the database by default. After connecting to the cluster, you can use the <strong id="EN-US_TOPIC_0000001707254701__b1214914341619">pg_query_audit</strong> function to view the logs. For details, see <a href="#EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_s0aec83296dc54e8f92966415aaaa3a6f">Using Functions to View Database Audit Logs</a>.</p>
</div>
<div class="section" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_s0aec83296dc54e8f92966415aaaa3a6f"><a name="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_s0aec83296dc54e8f92966415aaaa3a6f"></a><a name="en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_s0aec83296dc54e8f92966415aaaa3a6f"></a><h4 class="sectiontitle">Using Functions to View Database Audit Logs</h4><ol id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_o82d22dce978043d999c04461ae3f8728"><li id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_li20571114104520"><span>Use the SQL client tool to connect to the database cluster. For details, see <a href="dws_01_0131.html">Cluster Connection</a>.</span></li><li id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_l6adae163cc814200bfc18cc0dcd8fec4"><span>Use the <strong id="EN-US_TOPIC_0000001707254701__b10707545168">pg_query_audit</strong> function to query the audit logs of the current CN. The syntax is as follows:</span><p><div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_sd1af1f6fd6774c95a7a711eaa1671bec"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="n">pg_query_audit</span><span class="p">(</span><span class="n">timestamptz</span><span class="w"> </span><span class="n">startime</span><span class="p">,</span><span class="n">timestamptz</span><span class="w"> </span><span class="n">endtime</span><span class="p">,</span><span class="n">audit_log</span><span class="p">)</span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_a8e6eccd82d654700879ad1db8ec167c4"><strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_b84235270617645">startime</strong> and <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_b84235270617646">endtime</strong> indicate the start time and end time of the audit record, respectively. <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_b84235270617652">audit_log</strong> indicates the physical file path of the queried audit logs. If <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_b8566445751777">audit_log</strong> is not specified, the audit log information of the current instance is queried.</p>
<div class="p" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_p354313295118">For example, view the audit records of the current CN node in a specified period.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_scf68a9eb217a45038492330341759a41"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">SELECT</span><span class="w"> </span><span class="o">*</span><span class="w"> </span><span class="k">FROM</span><span class="w"> </span><span class="n">pg_query_audit</span><span class="p">(</span><span class="s1">'2021-02-23 21:49:00'</span><span class="p">,</span><span class="s1">'2021-02-23 21:50:00'</span><span class="p">);</span>
</pre></div></td></tr></table></div>
</div>
</div>
<p id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_aaa8116d1fbc547c5ba69a165219b77a0">The query result is as follows:</p>
<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_s474acfe265684443966ae02bc22ef024"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span></pre></div></td><td class="code"><div><pre><span></span><span class="w"> </span><span class="n">begintime</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">endtime</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">operation_type</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">audit_type</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">result</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">username</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">database</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">client_conninfo</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">object_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">command_text</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">detail_info</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">transaction_xid</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">query_id</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">node_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">session_id</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">local_port</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">remote_port</span><span class="w"> </span>
<span class="c1">---------------------------+---------------------------+----------------+------------+--------+------------+----------+-----------------+-------------+-----------------+------------------------------------------------------------------+-----------------+----------+--------------+------------------------------+------------+-------------</span>
<span class="w"> </span><span class="mi">2021</span><span class="o">-</span><span class="mi">02</span><span class="o">-</span><span class="mi">23</span><span class="w"> </span><span class="mi">21</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">57</span><span class="p">.</span><span class="mi">76</span><span class="o">+</span><span class="mi">08</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">2021</span><span class="o">-</span><span class="mi">02</span><span class="o">-</span><span class="mi">23</span><span class="w"> </span><span class="mi">21</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">57</span><span class="p">.</span><span class="mi">82</span><span class="o">+</span><span class="mi">08</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">login_logout</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">user_login</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">ok</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">dbadmin</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">gaussdb</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">gsql</span><span class="o">@</span><span class="p">[</span><span class="k">local</span><span class="p">]</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">gaussdb</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">login</span><span class="w"> </span><span class="n">db</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">login</span><span class="w"> </span><span class="n">db</span><span class="p">(</span><span class="n">gaussdb</span><span class="p">)</span><span class="w"> </span><span class="n">successfully</span><span class="p">,</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="k">current</span><span class="w"> </span><span class="k">user</span><span class="w"> </span><span class="k">is</span><span class="p">:</span><span class="w"> </span><span class="n">dbadmin</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">0</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">0</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">coordinator1</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">140324035360512</span><span class="p">.</span><span class="mi">667403397820909</span><span class="p">.</span><span class="n">coordinator1</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">27777</span><span class="w"> </span><span class="o">|</span><span class="w"> </span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_a232ef00f39734fe99288fcd95a05ae01">This record indicates that user <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_b4963343948">dbadmin</strong> logged in to the <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_b14363761517">gaussdb</strong> database at 2021-02-23 21:49:57.82 (GMT+08:00). After the host specified by <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_b19469184964610">log_hostname</strong> is started and a client is connected to its IP address, the host name found by reverse DNS resolution is displayed following the at sign (@) in the value of <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_b9470849124615">client_conninfo</strong>.</p>
</p></li><li id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_li7414161812119"><span>Use the <strong id="EN-US_TOPIC_0000001707254701__b3406206181612">pgxc_query_audit</strong> function to query audit logs of all CNs. The syntax is as follows:</span><p><div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_screen149032217586"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="n">pgxc_query_audit</span><span class="p">(</span><span class="n">timestamptz</span><span class="w"> </span><span class="n">startime</span><span class="p">,</span><span class="n">timestamptz</span><span class="w"> </span><span class="n">endtime</span><span class="p">)</span>
</pre></div></td></tr></table></div>
</div>
<div class="p" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_p1296442015585">For example, view the audit records of all CN nodes in a specified period.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_screen4364147162217"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">SELECT</span><span class="w"> </span><span class="o">*</span><span class="w"> </span><span class="k">FROM</span><span class="w"> </span><span class="n">pgxc_query_audit</span><span class="p">(</span><span class="s1">'2021-02-23 22:05:00'</span><span class="p">,</span><span class="s1">'2021-02-23 22:07:00'</span><span class="p">)</span><span class="w"> </span><span class="k">where</span><span class="w"> </span><span class="n">audit_type</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s1">'user_login'</span><span class="w"> </span><span class="k">and</span><span class="w"> </span><span class="n">username</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s1">'user1'</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
</div>
<p id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_p1166434910266">The query result is as follows:</p>
<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_screen171147537274"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span></pre></div></td><td class="code"><div><pre><span></span><span class="w"> </span><span class="n">begintime</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">endtime</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">operation_type</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">audit_type</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">result</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">username</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">database</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">client_conninfo</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">object_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">command_text</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">detail_info</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">transaction_xid</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">query_id</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">node_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">session_id</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">local_port</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">remote_port</span><span class="w"> </span>
<span class="c1">----------------------------+----------------------------+----------------+------------+--------+----------+----------+-----------------+-------------+--------------+------------------------------------------------------------+-----------------+----------+--------------+----------------------------------------------+------------+-------------</span>
<span class="w"> </span><span class="mi">2021</span><span class="o">-</span><span class="mi">02</span><span class="o">-</span><span class="mi">23</span><span class="w"> </span><span class="mi">22</span><span class="p">:</span><span class="mi">06</span><span class="p">:</span><span class="mi">22</span><span class="p">.</span><span class="mi">219</span><span class="o">+</span><span class="mi">08</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">2021</span><span class="o">-</span><span class="mi">02</span><span class="o">-</span><span class="mi">23</span><span class="w"> </span><span class="mi">22</span><span class="p">:</span><span class="mi">06</span><span class="p">:</span><span class="mi">22</span><span class="p">.</span><span class="mi">271</span><span class="o">+</span><span class="mi">08</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">login_lgout</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">user_login</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">ok</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">user1</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">gaussdb</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">gsql</span><span class="o">@</span><span class="p">[</span><span class="k">local</span><span class="p">]</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">gaussdb</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">login</span><span class="w"> </span><span class="n">db</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">login</span><span class="w"> </span><span class="n">db</span><span class="p">(</span><span class="n">gaussdb</span><span class="p">)</span><span class="w"> </span><span class="n">successfully</span><span class="p">,</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="k">current</span><span class="w"> </span><span class="k">user</span><span class="w"> </span><span class="k">is</span><span class="p">:</span><span class="w"> </span><span class="n">user1</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">0</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">0</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">coordinator2</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">140689577342720</span><span class="p">.</span><span class="mi">667404382271356</span><span class="p">.</span><span class="n">coordinator</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">27782</span><span class="w"> </span><span class="o">|</span><span class="w"> </span>
<span class="w"> </span><span class="mi">2021</span><span class="o">-</span><span class="mi">02</span><span class="o">-</span><span class="mi">23</span><span class="w"> </span><span class="mi">22</span><span class="p">:</span><span class="mi">05</span><span class="p">:</span><span class="mi">51</span><span class="p">.</span><span class="mi">697</span><span class="o">+</span><span class="mi">08</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">2021</span><span class="o">-</span><span class="mi">02</span><span class="o">-</span><span class="mi">23</span><span class="w"> </span><span class="mi">22</span><span class="p">:</span><span class="mi">05</span><span class="p">:</span><span class="mi">51</span><span class="p">.</span><span class="mi">749</span><span class="o">+</span><span class="mi">08</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">login_lgout</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">user_login</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">ok</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">user1</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">gaussdb</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">gsql</span><span class="o">@</span><span class="p">[</span><span class="k">local</span><span class="p">]</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">gaussdb</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">login</span><span class="w"> </span><span class="n">db</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">login</span><span class="w"> </span><span class="n">db</span><span class="p">(</span><span class="n">gaussdb</span><span class="p">)</span><span class="w"> </span><span class="n">successfully</span><span class="p">,</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="k">current</span><span class="w"> </span><span class="k">user</span><span class="w"> </span><span class="k">is</span><span class="p">:</span><span class="w"> </span><span class="n">user1</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">0</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">0</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">coordinator1</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">140525048424192</span><span class="p">.</span><span class="mi">667404351749143</span><span class="p">.</span><span class="n">coordinator1</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="mi">27777</span><span class="w"> </span><span class="o">|</span><span class="w"> </span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_p473845517294">The query result shows the successful login records of <strong id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_en-us_topic_0000001405788485_en-us_topic_0000001233761719_b10117183012223">user1</strong> in to CN1 and CN2.</p>
</p></li><li id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_li1392388431"><span>Query the audit records of multiple objects.</span><p><div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_screen10474171118469"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">SET</span><span class="w"> </span><span class="n">audit_object_name_format</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="s1">'all'</span><span class="p">;</span>
<span class="k">SELECT</span><span class="w"> </span><span class="n">object_name</span><span class="p">,</span><span class="k">result</span><span class="p">,</span><span class="n">operation_type</span><span class="p">,</span><span class="n">command_text</span><span class="w"> </span><span class="k">FROM</span><span class="w"> </span><span class="n">pgxc_query_audit</span><span class="p">(</span><span class="s1">'2022-08-26 8:00:00'</span><span class="p">,</span><span class="s1">'2022-08-26 22:55:00'</span><span class="p">)</span><span class="w"> </span><span class="k">where</span><span class="w"> </span><span class="n">command_text</span><span class="w"> </span><span class="k">like</span><span class="w"> </span><span class="s1">'%student%'</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_p12417686434">The query result is as follows:</p>
<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_screen1241811819435"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span>
<span class="normal">5</span>
<span class="normal">6</span>
<span class="normal">7</span>
<span class="normal">8</span></pre></div></td><td class="code"><div><pre><span></span><span class="w"> </span><span class="n">object_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">result</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">operation_type</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">command_text</span><span class="w"> </span>
<span class="c1">------------------------------------------------------------------+--------+----------------+------------------------------------------------------------------------------------------------------------------</span>
<span class="c1">--------------------------------------------</span>
<span class="w"> </span><span class="n">student</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">ok</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">ddl</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">CREATE</span><span class="w"> </span><span class="k">TABLE</span><span class="w"> </span><span class="n">student</span><span class="p">(</span><span class="n">stuNo</span><span class="w"> </span><span class="nb">int</span><span class="p">,</span><span class="w"> </span><span class="n">stuName</span><span class="w"> </span><span class="nb">TEXT</span><span class="p">);</span>
<span class="w"> </span><span class="n">studentscore</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">ok</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">ddl</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">CREATE</span><span class="w"> </span><span class="k">TABLE</span><span class="w"> </span><span class="n">studentscore</span><span class="p">(</span><span class="n">stuNo</span><span class="w"> </span><span class="nb">int</span><span class="p">,</span><span class="w"> </span><span class="n">stuscore</span><span class="w"> </span><span class="nb">int</span><span class="p">);</span>
<span class="w"> </span><span class="p">[</span><span class="ss">&quot;public.student_view01&quot;</span><span class="p">,</span><span class="ss">&quot;public.studentscore&quot;</span><span class="p">,</span><span class="ss">&quot;public.student&quot;</span><span class="p">]</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">ok</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">ddl</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">CREATE</span><span class="w"> </span><span class="k">OR</span><span class="w"> </span><span class="k">REPLACE</span><span class="w"> </span><span class="k">VIEW</span><span class="w"> </span><span class="n">student_view01</span><span class="w"> </span><span class="k">AS</span><span class="w"> </span><span class="k">SELECT</span><span class="w"> </span><span class="o">*</span><span class="w"> </span><span class="k">FROM</span><span class="w"> </span><span class="n">student</span><span class="w"> </span><span class="n">t1</span><span class="w"> </span><span class="k">where</span><span class="w"> </span><span class="n">t1</span><span class="p">.</span><span class="n">stuNo</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="p">(</span><span class="k">select</span><span class="w"> </span><span class="n">stuNo</span><span class="w"> </span><span class="k">from</span><span class="w"> </span><span class="n">studentscore</span><span class="w"> </span><span class="n">t2</span><span class="w"> </span><span class="k">where</span><span class="w"> </span><span class="n">t1</span><span class="p">.</span><span class="n">stuNo</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">t2</span><span class="p">.</span><span class="n">stuNo</span><span class="p">);</span>
<span class="w"> </span><span class="p">[</span><span class="ss">&quot;public.student_view01&quot;</span><span class="p">,</span><span class="ss">&quot;public.student&quot;</span><span class="p">,</span><span class="ss">&quot;public.studentscore&quot;</span><span class="p">]</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">ok</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">dml</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">SELECT</span><span class="w"> </span><span class="o">*</span><span class="w"> </span><span class="k">FROM</span><span class="w"> </span><span class="n">student_view01</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001707254701__en-us_topic_0000001422959325_p641810824310">In the <strong id="EN-US_TOPIC_0000001707254701__b11383861620">object_name</strong> column, the table, view, and base table associated with the view are displayed.</p>
</p></li></ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="dws_01_0184.html">Database Audit Logs</a></div>
</div>
</div>
View Git Blame Copy Permalink