
# 审计日志格式说明
创建DRS录制回放任务时，源数据库引擎可选不同来源。不同源数据库来源对应的审计日志格式不同，具体说明可参考如下说明。
表1审计日志参数说明 
| 参数         | 说明                          |
|:---|:---|
| quo        | 包裹符号，一般审计日志中的SQL是会被该符号包裹起来。 |
| column     | 每行总列数。                      |
| separator  | 审计日志分隔符号。                   |
| format     | 关键列表示的含义，从0开始计数。            |
| timeFormat | 日期格式，为空时表示时间戳。              |
   
#### 华为云RDS for MySQL
```
quo ="
column = 12
separator = ,
format = threadId:1,protocolType:3,time:4,queryType:5,sql:6,client:10
timeFormat = yyyy-MM-dd'T'HH:mm:ss 'UTC'
```
#### 华为云TaurusDB
```
quo =^^
column = 19
separator = ,
format = threadId:4,latency:12,protocolType:0,time:2,queryType:3,sql:6,client:10,schemaName:11,client2:8
timeFormat =
```
#### 阿里云RDS MySQL版
```
quo ="
column = 16
separator = ,
format = threadId:2,latency:8,time:10,queryType:5,sql:0,client:4,schemaName:1
timeFormat =
```
#### 阿里云PolarDB MySQL版
```
quo ="
separator=,
column = 12
format = threadId:2,latency:8,time:11,queryType:5,sql:0,client:4,schemaName:1
timeFormat =
```
#### 阿里云PolarDB-X1.0
```
quo = "
separator = ,
column = 40
format = threadId:5,latency:21,time:27,queryType:28,sql:25,client:4,schemaName:6,params:17,instanceId:10,dbUser:37
formatMap = {sql:[log,sql],schemaName: [db,db_name],client:[client_ip,user_ip],threadId:[tid,thread_id,client_port],time:[ts,origin_time,sql_time],queryType:[sql_type],latency:[latency,response_time],params:[parameters],dbUser:[user],instanceId:[instance_id]}
```
#### 阿里云PolarDB-X2.0
```
quo = "
column = 25
separator = ,
format = threadId:2,latency:8,time:10,queryType:5,sql:0,client:4,schemaName:1,dbUser:3
formatMap = {sql:[log,sql],schemaName: [db,db_name],client:[client_ip,user_ip],threadId:[tid,thread_id,client_port],time:[ts,origin_time,sql_time],queryType:[sql_type],latency:[latency,response_time],params:[parameters],dbUser:[USER]}
```
#### 腾讯云TDSQL-C MySQL版
```
quo ="
separator=,
column = 20
format = threadId:15,latency:9,time:18,queryType:2,sql:6,client:7,schemaName:5
timeFormat = yyyy-MM-dd HH:mm:ss
```
#### Amazon Aurora MySQL
```
quo ='
column = 10
separator = ,
format = threadId:4,time:0,sql:8,client:3,schemaName:7
timeFormat = yyyy-MM-dd'T'HH:mm:ss.SSS'Z'
```
#### Amazon RDS MySQL
```
quo ='
column = 11
separator = ,
format = threadId:4,time:0,sql:8,client:3,schemaName:7
timeFormat = yyyyMMdd HH:mm:ss
```
#### Amazon RDS MariaDB
```
quo ='
column = 11
separator = ,
format = threadId:4,time:0,sql:8,client:3,schemaName:7
timeFormat = yyyyMMdd HH:mm:ss
```
#### 自建MySQL
```
quo = 
separator =\t
column = 3
format = time:0,threadIdAndProtocolType:1,sql:2
//MySQL 5.7及以上版本
timeFormat = yyyy-MM-dd'T'HH:mm:ss.SSSSSS'Z'
//MySQL 5.5、5.6版本
timeFormat = yyMMdd HH:mm:ss
```
#### MariaDB
```
quo ='
separator=,
column = 10
format = threadId:4,time:0,protocolType:6,sql:8,client:3,schemaName:7
timeFormat = yyyyMMdd HH:mm:ss
```
