Updated on 2025-08-25 GMT+08:00

Audit Log Collection Is Enabled

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

gaussdb-instance-enable-auditLog

Identifier

gaussdb-instance-enable-auditLog

Description

If the audit log is not enabled for a GaussDB instance, this instance is non-compliant.

Tag

gaussdb

Trigger Type

Configuration change

Filter Type

gaussdb.instance

Rule Parameters

None

Application Scenarios

The audit function records all user activities on databases. You can view audit logs to perform security assessments and pinpoint problem causes, thereby enhancing system operational efficiency.

If you enable log reporting, audit logs generated by GaussDB instances will be uploaded to Log Tank Service (LTS) for management. You can view detailed audit logs of GaussDB instances, search, visualize, and download logs, and view real-time logs. For details, see Interconnecting with LTS and Querying Database Audit Logs.

Solution

Enable the function of uploading audit logs to LTS. For details, see Enabling Upload Audit Logs to LTS.

Rule Logic

  • If audit logs are not uploaded to LTS, the GaussDB instance is non-compliant.
  • If audit logs are uploaded to LTS, the GaussDB instance is compliant.