Help Center/ GaussDB/ Developer Guide(Centralized_2.x)/ GUC Parameters/ Auditing/ User and Permission Audit
Updated on 2023-10-23 GMT+08:00
View PDF
Share

User and Permission Audit

audit_login_logout

Parameter description: Specifies whether to audit the GaussDB user's login (including login success and failure) and logout.

This parameter is a SIGHUP parameter. Set it based on instructions provided in Table 1.

Value range: an integer ranging from 0 to 7

  • 0 indicates that the function of auditing users' logins and logouts is disabled.
  • 1 indicates that only successful user logins are audited.
  • 2 indicates that only failed user logins are audited.
  • 3 indicates that successful and failed user logins are audited.
  • 4 indicates that only user logouts are audited.
  • 5 indicates that successful user logouts and logins are audited.
  • 6 indicates that failed user logouts and logins are audited.
  • 7 indicates that successful user logins, failed user logins, and logouts are audited.

Default value: 7

audit_database_process

Parameter description: Specifies whether to audit GaussDB start, stop, recovery, and switchover operations.

This parameter is a SIGHUP parameter. Set it based on instructions provided in Table 1.

Value range: 0 or 1

  • 0 indicates that the function of auditing GaussDB start, stop, recovery, and switchover operations is disabled.
  • 1 indicates that the function of auditing GaussDB start, stop, recovery, and switchover operations is enabled.

Default value: 1

When the database is started, the standby DN is promoted to primary. Therefore, the DN type in the audit log is system_switch when the DN is started.

audit_user_locked

Parameter description: Specifies whether to audit the GaussDB user's locking and unlocking.

This parameter is a SIGHUP parameter. Set it based on instructions provided in Table 1.

Value range: 0 or 1

  • 0 indicates that the function of auditing user's locking and unlocking is disabled.
  • 1 indicates that the function of auditing user's locking and unlocking is enabled.

Default value: 1

audit_user_violation

Parameter description: Specifies whether to audit the access violation operations of a user.

This parameter is a SIGHUP parameter. Set it based on instructions provided in Table 1.

Value range: 0 or 1

  • 0 indicates that the function of auditing the access violation operations of a user is disabled.
  • 1 indicates that the function of auditing the access violation operations of a user is enabled.

Default value: 0

audit_grant_revoke

Parameter description: Specifies whether to audit the granting and reclaiming of the GaussDB user's permission.

This parameter is a SIGHUP parameter. Set it based on instructions provided in Table 1.

Value range: 0 or 1

  • 0 indicates that the function of auditing the granting and reclaiming of a user's permission is disabled.
  • 1 indicates that the function of auditing the granting and reclaiming of a user's permission is enabled.

Default value: 1

Parent topic: Auditing