Audit Logging Levels
On this page
As of the time of this publication, strict mode is available and licensed only as part of the SingleStoreDB Premium edition.
There are 11 logging levels that can be specified by the
auditlog_ variable in a node’s memsql.
Logging is disabled:
Log only valid statements and queries:
Log valid and invalid statements and queries:
A valid statement or query is one that can be successfully parsed by SingleStore.
User credentials and PII information contained in all valid statements and queries is obfuscated in audit logs.
Before selecting any level that specifies
INCLUDING-PARSE-FAILS, ensure that the log file location is secured appropriately and that extra precaution is taken when processing the logs.
If your cluster has strict mode enabled, the lowest logging level you can set is
OFF level is the default setting and prevents any logs from being created.
If your cluster has strict mode enabled, this logging level cannot be set because audit logging must also be enabled.
LOGINS-ONLY level logs the successful and failed login attempts into the database.
LOGINS-ONLY level does not include the
PARSE-FAILS option for logins, because this option is reserved for queries.
LOGINS-ONLY level is the lowest level of the audit log, i.
ADMIN-ONLY level is inclusive of the
LOGINS-ONLY level logs, and it also logs DDL operations such as
SET PASSWORD), the password’s value will be omitted from the log.
ADMIN-ONLY-INCLUDING-PARSE-FAILS level is inclusive of
ADMIN-ONLY but also logs invalid statements that fail to parse.
If your cluster has strict mode enabled, you must select either of these levels or a more verbose level.
WRITES-ONLY level is inclusive of
ADMIN-ONLY but also logs DML operations such as
UPDATE, with one exception:
SELECT queries are not logged.
WRITES-ONLY-INCLUDING-PARSE-FAILS level is inclusive of
WRITES-ONLY but also logs invalid statements that fail to parse.
ALL-QUERIES level is inclusive of
WRITES-ONLY but also logs read operations such as
ALL-QUERIES-INCLUDING-PARSE-FAILS level is inclusive of
ALL-QUERIES but also logs invalid statements that fail to parse.
ALL-QUERIES-PLAINTEXT level is inclusive of
ALL-QUERIES but also logs the entire literal query, not just the parameterized version without literal strings and numbers.
ALL-QUERIES-PLAINTEXT-INCLUDING-PARSE-FAILS level is inclusive of
ALL-QUERIES-PLAINTEXT but also logs invalid statements that fail to parse.
ALL-RESULTS level is inclusive of
ALL-QUERIES-PLAINTEXT but also logs the database’s responses.
When this level is selected, the entry ID for a query is shared with the results entries.
ALL-RESULTS-INCLUDING-PARSE-FAILS level is inclusive of
ALL-RESULTS but also logs invalid statements that fail to parse.
Last modified: January 13, 2023