Audit Logging Levels
Warning
As of the time of this publication, strict mode is made available and licensed only as part of the SingleStore DB Premium edition.
There are 11 logging levels that can be specified by the auditlog_level
variable in a node’s memsql.cnf file. These levels can be organized into three categories, each with increasing verbosity:
Logging is disabled:
OFF
Log only valid statements and queries:
LOGINS-ONLY
ADMIN-ONLY
WRITES-ONLY
ALL-QUERIES
ALL-QUERIES-PLAINTEXT
ALL-RESULTS
Log valid and invalid statements and queries:
ADMIN-ONLY-INCLUDING-PARSE-FAILS
WRITES-ONLY-INCLUDING-PARSE-FAILS
ALL-QUERIES-INCLUDING-PARSE-FAILS
ALL-QUERIES-PLAINTEXT-INCLUDING-PARSE-FAILS
ALL-RESULTS-INCLUDING-PARSE-FAILS
A valid statement or query is one that can be successfully parsed by SingleStore. Invalid statements or queries include those with misspellings or improper syntax.
Caution
User credentials and PII information contained in all valid statements and queries is obfuscated in audit logs. When invalid statements cannot be parsed, the literal query text is included in the log entry. This text may contain sensitive information. For example, if a user attempts to connect to the database with an invalid statement that contains their username and password, these values will be logged in plain text.
Before selecting any level that specifies INCLUDING-PARSE-FAILS
, ensure that the log file location is secured appropriately and that extra precaution is taken when processing the logs.
If your cluster has strict mode enabled, the lowest logging level you can set is ADMIN-ONLY
or ADMIN-ONLY-INCLUDING-PARSE-FAILS
.