Audit Log Upload Policy Description

Scenario

The RDS for MySQL console uploads audit logs and generates a log file every half an hour or when the logs reach 100 MB. However, there are cases where audit logs are less than 100 MB but still get loaded and generate a log file every 2 minutes.

Possible Causes

Audit log rotation policy: Logs are uploaded every half an hour or when the accumulated size reaches 100 MB.

1. The rotation interval for audit logs is half an hour. The time under Updated on the console is when the last SQL statement is written to the audit log file. Based on the update time, you can easily analyze downloaded logs.
2. In certain special cases, such as when the standby instance is being rebuilt or a primary/standby switchover is being performed, audit logs are forcibly rotated. As a result, a new audit log file less than 100 MB is generated within half an hour. This scenario is normal.