Querying the Policy for SQL Audit Logs

Function

This API is used to query the policy for SQL audit logs.

Before calling an API, you need to understand the API in Authentication.

URI

URI format
GET /v3/{project_id}/instances/{instance_id}/auditlog-policy

Parameter description

**Table 1** Parameter description
Name	Mandatory	Description
project_id	Yes	Project ID of a tenant in a region. For details about how to obtain the project ID, see Obtaining a Project ID.
instance_id	Yes	Specifies the DB instance ID.

Request

Request parameters
None

URI example
GET https://{endpoint}/v3/0483b6b16e954cb88930a360d2c4e663/instances/cee5265e1e5845649e354841234567dfin01/auditlog-policy

Response

Normal response

**Table 2** Parameter description
Name	Type	Description
keep_days	Integer	Number of days for storing audit logs. The value is 0 when SQL audit is disabled.
audit_types	Array of strings	Actual operation types recorded in audit logs. If this parameter is left blank, no operation types are filtered out.
all_audit_log_action	String	All operation types that can be recorded in audit logs.

Example normal response

{
	"keep_days":7,
        "audit_types":["CREATE_USER"],
        "all_audit_log_action": '{"DCL":"CREATE_USER,DROP_USER,RENAME_USER,GRANT,REVOKE,ALTER_USER,ALTER_USER_DEFAULT_ROLE","DDL":"CREATE,ALTER,DROP,RENAME,TRUNCATE,REPAIR,OPTIMIZE","DML":"INSERT,DELETE,UPDATE,REPLACE,SELECT","OTHER":"BEGIN/COMMIT/ROLLBACK,PREPARED_STATEMENT,CALL_PROCEDURE,KILL,SET_OPTION,CHANGE_DB,UNINSTALL_PLUGIN,UNINSTALL_PLUGIN,INSTALL_PLUGIN,SHUTDOWN,SLAVE_START,SLAVE_STOP,LOCK_TABLES,UNLOCK_TABLES,FLUSH,XA"}'
}