[MDEV-26144] Audit log produces useless entries only containing a string of 'O' - Jira

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Critical
Resolution: Incomplete
Affects Version/s: 10.3.24, 10.3.29
Fix Version/s: N/A
Component/s: Plugin - Audit
Labels:
- audit-plugin
- need_feedback
Environment:
CentOS 7

Description

Audit Log entries are readabel only for CONNECT and DISCONNECT events. All other entries consist only of zeros.

20210714 08:40:48,ms975.mymanaged.host,OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

20210714 08:40:49,ms975.mymanaged.host,dolomiti4,192.168.137.5,107155,0,CONNECT,server4,,0

20210714 08:40:49,ms975.mymanaged.host,OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

Configuration:

show global variables like 'server_audit%';

+-------------------------------+----------------------------------------------------------------------------------------------+

| Variable_name                 | Value                                                                                        |

+-------------------------------+----------------------------------------------------------------------------------------------+

| server_audit_events           | CONNECT,QUERY                                                                                |

| server_audit_excl_users       | xxxxxxxxxxxx |

| server_audit_file_path        | /var/log/mariadb/audit/server_audit.log                                                      |

| server_audit_file_rotate_now  | OFF                                                                                          |

| server_audit_file_rotate_size | 134217728                                                                                    |

| server_audit_file_rotations   | 9                                                                                            |

| server_audit_incl_users       |                                                                                              |

| server_audit_logging          | ON                                                                                           |

| server_audit_mode             | 0                                                                                            |

| server_audit_output_type      | file                                                                                         |

| server_audit_query_log_limit  | 1024                                                                                         |

| server_audit_syslog_facility  | LOG_USER                                                                                     |

| server_audit_syslog_ident     | mysql-server_auditing                                                                        |

| server_audit_syslog_info      |                                                                                              |

| server_audit_syslog_priority  | LOG_INFO                                                                                     |

+-------------------------------+----------------------------------------------------------------------------------------------+

Attachments

Activity

Ascending order - Click to sort in descending order

Sergei Golubchik added a comment - 2021-07-18 13:41

What do we need to do to be able to repeat that affect?

Sergei Golubchik added a comment - 2021-07-18 13:41 What do we need to do to be able to repeat that affect?

Ulrich Moser (Inactive) added a comment - 2021-09-18 13:41

The error occured after upgrading from 10.3.18 to 10.3.29. Except for that upgrade nothing was changed.

Ulrich Moser (Inactive) added a comment - 2021-09-18 13:41 The error occured after upgrading from 10.3.18 to 10.3.29. Except for that upgrade nothing was changed.

Sergei Golubchik added a comment - 2021-09-18 15:17

I'm afraid, it's not enough. What does SHOW PLUGINS show after this upgrade?

Sergei Golubchik added a comment - 2021-09-18 15:17 I'm afraid, it's not enough. What does SHOW PLUGINS show after this upgrade?

People

Assignee:: Sergei Golubchik

Reporter:: Ulrich Moser (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 2021-07-14 14:04

Updated:: 2021-10-18 12:20

Resolved:: 2021-10-18 12:20

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.

MariaDB Server