Lindorm provides the SQL Audit feature, which is powered by Alibaba Cloud Simple Log Service (SLS). You can use audit logs to analyze data operations that occur within a specified period and filter these operations by specific fields. This topic describes how to enable the SQL Audit feature in the Lindorm console.
Prerequisites
The minor version of LindormTable is 2.7.6 or later. For information about how to view or update the minor version of LindormTable, see Release notes of LindormTable and Upgrade the minor engine version of a Lindorm instance.
Usage notes
Lindorm New Edition and Lindorm Single-node Edition do not support the SQL audit log feature.
If you enable the audit log feature as a RAM user, you must grant the AliyunLogFullAccess permission to the RAM user. For more information about how to grant permissions to a RAM user, see Grant permissions to a RAM user.
After the audit log feature is enabled, Lindorm creates a project and a dedicated Logstore in the region where the Lindorm instance is deployed.
The project name follows the format
aliyun-product-<Alibaba Cloud account ID>-<Region ID>.The dedicated Logstore is named
lindorm-sql-audit-log.
You cannot perform specific operations on dedicated Logstores. For example, you cannot write data to a dedicated Logstore or modify or delete the indexes of a dedicated Logstore. In addition, you cannot modify the attributes of a dedicated Logstore. However, no limits are imposed on features such as data query, statistical analysis, and alerting.
Make sure that SLS is available. If SLS becomes unavailable, the full log analysis feature cannot be used.
Billing
The fees for audit logs are charged by SLS based on the storage usage and retention period of audit logs. For more information, see SLS pricing.
Procedure
Log on to the Lindorm console.
In the upper-left corner of the page, select the region where the instance is deployed.
On the Instances page, click the ID of the target instance or click View Instance Details in the Actions column for the instance.
In the navigation pane on the left, click Wide Table Engine.
Click the SQL Audit Logs tab, then click Enable audit logs.
In the Enable SQL Audit Logs dialog box, click OK.