Help Center> Database Security Service> Best Practices> Database Audit Best Practices> Deploying the Database Audit Agent in a Container> Adding a Database and Exporting Database Configurations
View PDF

Adding a Database and Exporting Database Configurations

Add a database to be audited, enable the audit function, and import the database configurations to Object Storage Service (OBS).

Limitations and Constraints

  • Before adding a database, you need to check the databases bound to cluster workloads and ensure:
    • A database is added under only one audit instance.
    • Databases accessed by the same workload must be added to the same audit instance.
    • If the databases accessed by multiple workloads overlap, all these databases must be added to the same audit instance.
  • If any of the following changes occurred, you need to export your latest database configurations to an OBS bucket, import the bucket to the CCE cluster, and use the bucket for cluster storage:

    A database audit instance is purchased, or a database is added or deleted.

Adding a Database and Enabling Audit

After purchasing database audit, add the database to be audited to the database audit instance and enable the database audit function for the database.

For details about how to purchase database audit, see Purchasing Database Audit.

  1. Log in to the management console.
  2. Go to the database addition page.

    Figure 1 Accessing the database addition page

  3. In the displayed dialog box, set database parameters described in Table 1.

    Database audit supports UTF-8 and GBK character sets encoding.
    Figure 2 Add Database dialog box

  4. Click OK. The database is added to the database list and its audit status is Disabled.
  5. Locate the row that contains the database and click Enable in the Operation column to enable audit.

Export database configurations.

Import the database configurations to OBS.

  1. In the left navigation pane, choose Instances.
  2. Click Export Database Configurations.

    Figure 3 Exporting database configurations
    • The Export Database Configurations button is hidden. To show this button, add ?exportCfg at the end of the link of the instance list page, and press Enter.
    • Database configuration includes the configurations of the database to be audited and the database audit agent.

  3. Click OK.
  4. After you agree to the authorization, a bucket named dbss-audit-agent-{projectid} will be created in OBS.

    If any of the following changes occurred, your audit instance configurations will also change and you need to export them again:

    A database audit instance is purchased, or a database is added or deleted.