Quick Start
After purchasing a database audit instance, add the database to be audited to the instance and install an agent on the database or application side. Database audit works only when the database to be audited is connected to the database audit instance.
Background
Database audit supports auditing databases built on ECS, BMS, and RDS on Huawei Cloud.
- Database audit cannot be used across regions. The database to be audited and the database audit instance you purchased must be in the same region.
- If SSL is enabled for a database, the database cannot be audited. To use database audit, disable SSL first. For details, see How Do I Disable SSL for a Database?.
- For details about audit data storage, see How Long Is the Audit Data of Database Audit Stored by Default?
Quick Configuration Procedure
After purchasing database audit, you can quickly get started by following the configuration procedure shown in Figure 1. For details, see Table 1.
|
Step |
Configuration |
Description |
|---|---|---|
|
1 |
Purchase database audit. Add a database to the database audit instance and enable audit for the database. |
|
|
2 |
Select an agent add mode. Database audit supports auditing databases built on ECS, BMS, and RDS on Huawei Cloud. Select an agent add mode based on your database deployed on Huawei Cloud. |
|
|
3 |
Configure TCP (port 8000) and UDP (ports 7000 to 7100) in the security group inbound rule of the database audit instance to allow the agent to communicate with the audit instance. |
|
|
4 |
Download and then install the agent on the database or application based on the add mode you chose. |
|
|
5 |
Enable database audit and connect the added database to the database audit instance. |
|
|
6 |
By default, database audit complies with a full audit rule, which is used to audit all databases that are connected to the database audit instance. You can view the audit result on the database audit page.
NOTICE:
You can set database audit rules as required. For details, see Adding Audit Scope. |
Helpful Links
- Choose the way to add an agent and the node to install it. For details, see How Do I Install a Database Audit Agent?
- If the audit function is unavailable, rectify the fault by following the instructions provided in Database Audit Is Unavailable.
Verifying the Result
When you connect the added database to the database audit instance, database audit records all operations performed on the database. You can view the audit result on the database audit page.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.
