======================================================================= Test of server audit plugin ======================================================================= ======================================================================= Install the audit plugin and auth test plugin ======================================================================= INSTALL PLUGIN test_plugin_server SONAME 'auth_test_plugin.so'; INSTALL PLUGIN server_audit SONAME 'server_audit.so'; ======================================================================= An unfortunate wait for check-testcase.test to complete disconnect ======================================================================= ======================================================================= Audit log file ======================================================================= ======================================================================= Initialize server audit variables ======================================================================= show variables like 'server_audit%'; Variable_name Value server_audit_events server_audit_excl_users server_audit_file_path server_audit.log server_audit_file_rotate_now OFF server_audit_file_rotate_size 1000000 server_audit_file_rotations 9 server_audit_incl_users server_audit_loc_info server_audit_logging OFF server_audit_output_type file server_audit_query_log_limit 1024 server_audit_syslog_facility LOG_USER server_audit_syslog_ident mysql-server_auditing server_audit_syslog_info server_audit_syslog_priority LOG_INFO set global server_audit_file_path=null; set global server_audit_incl_users=null; set global server_audit_file_path='server_audit.log'; set global server_audit_output_type=file; set global server_audit_logging=on; ======================================================================= Generate audit log and test with invalid parameter values ======================================================================= set global server_audit_incl_users= repeat("'user',", 10000); ERROR 42000: Variable 'server_audit_incl_users' can't be set to the value of ''user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','use' show variables like 'server_audit_incl_users'; Variable_name Value server_audit_incl_users set global server_audit_excl_users= repeat("'user',", 10000); ERROR 42000: Variable 'server_audit_excl_users' can't be set to the value of ''user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','user','use' show variables like 'server_audit_excl_users'; Variable_name Value server_audit_excl_users ======================================================================= Generate audit log by connecting using non-existing user ======================================================================= connect(localhost,no_such_user,,mysql,MASTER_PORT,MASTER_SOCKET); ERROR 28000: Access denied for user 'no_such_user'@'localhost' (using password: NO) ======================================================================= Generate audit log with different parameter values and queries ======================================================================= set global server_audit_incl_users='odin, dva, tri'; create table t1_default (id int); set global server_audit_incl_users='odin, root, dva, tri'; create table t2_default (id int); set global server_audit_excl_users='odin, dva, tri'; insert into t1_default values (1), (2); select * from t1_default; id 1 2 set global server_audit_incl_users='odin, root, dva, tri'; insert into t2_default values (1), (2); select * from t2_default; id 1 2 alter table t1_default rename renamed_t1_default; set global server_audit_events='connect,query'; select 1, 2, # comment 3; 1 2 3 1 2 3 insert into t2_default values (1), (2); select * from t2_default; id 1 2 1 2 Test with different parameter values and queries select * from t_doesnt_exist; ERROR 42S02: Table 'test.t_doesnt_exist' doesn't exist syntax_error_query; ERROR 42000: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'syntax_error_query' at line 1 drop table renamed_t1_default, t2_default; show variables like 'server_audit%'; Variable_name Value server_audit_events CONNECT,QUERY server_audit_excl_users server_audit_file_path server_audit.log server_audit_file_rotate_now OFF server_audit_file_rotate_size 1000000 server_audit_file_rotations 9 server_audit_incl_users odin, root, dva, tri server_audit_loc_info server_audit_logging ON server_audit_output_type file server_audit_query_log_limit 1024 server_audit_syslog_facility LOG_USER server_audit_syslog_ident mysql-server_auditing server_audit_syslog_info server_audit_syslog_priority LOG_INFO set global server_audit_events=''; create database sa_db; create table t1_empty (id2 int); insert into t1_empty values (1), (2); select * from t1_empty; id2 1 2 drop table t1_empty; use sa_db; create table sa_t1_empty(id int); insert into sa_t1_empty values (1), (2); drop table sa_t1_empty; drop database sa_db; ======================================================================= Generate audit log by creating user and grants ======================================================================= create database sa_db; use sa_db; CREATE USER u1_empty IDENTIFIED BY 'pwd-123'; GRANT ALL ON sa_db TO u2_empty IDENTIFIED BY "pwd-321"; ERROR 42000: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'IDENTIFIED BY "pwd-321"' at line 1 SET PASSWORD FOR u1_empty = 'pwd 098'; CREATE USER u3_empty IDENTIFIED BY ''; ALTER USER u3_empty IDENTIFIED BY 'pwd-456'; drop user u1_empty, u3_empty; ======================================================================= Generate audit log with different server_audit_events and queries ======================================================================= set global server_audit_events='query_ddl'; create table t1_ddl(id int); insert into t1_ddl values (1), (2); select * from t1_ddl; id 1 2 select 2; 2 2 (select 2); 2 2 /*! select 2*/; 2 2 /*comment*/ select 2; 2 2 drop table t1_ddl; set global server_audit_events='query_ddl,query_dml'; create table t1_ddl_dml(id int); insert into t1_ddl_dml values (1), (2); select * from t1_ddl_dml; id 1 2 select 2; 2 2 drop table t1_ddl_dml; set global server_audit_events='query_dml'; create table t1_dml(id int); insert into t1_dml values (1), (2); select * from t1_dml; id 1 2 select 2; 2 2 (select 2); 2 2 /*! select 2*/; 2 2 /*comment*/ select 2; 2 2 drop table t1_dml; set global server_audit_events='query_dcl'; create table t1_dcl(id int); insert into t1_dcl values (1), (2); select * from t1_dcl; id 1 2 CREATE USER u1_dcl IDENTIFIED BY 'pwd-123'; GRANT ALL ON sa_db TO u2_dcl IDENTIFIED BY "pwd-321"; ERROR 42000: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'IDENTIFIED BY "pwd-321"' at line 1 SET PASSWORD # comment FOR u1_dcl = 'pwd 098'; SET PASSWORD FOR u1=; ERROR 42000: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '=' at line 1 CREATE USER u3_dcl IDENTIFIED BY ''; drop user u1_dcl, u3_dcl; select 2; 2 2 (select 2); 2 2 /*! select 2*/; 2 2 /*comment*/ select 2; 2 2 drop table t1_dcl; set global server_audit_events='query_dml_no_select'; create table t1_no_select(id int); insert into t1_no_select values (1), (2); select * from t1_no_select; id 1 2 select 2; 2 2 drop table t1_no_select; set global server_audit_events=''; set global server_audit_incl_users='user1'; create user user1_empty@localhost; grant all on sa_db.* to user1_empty@localhost; create table t1_empty(id int) engine=myisam; insert into t1_empty values (1); drop table t1_empty; set global server_audit_logging= off; set global server_audit_incl_users='root'; set global server_audit_logging= on; drop user user1_empty@localhost; set global server_audit_incl_users='root, plug_dest'; CREATE USER plug IDENTIFIED WITH 'test_plugin_server' AS 'plug_dest'; CREATE USER plug_dest IDENTIFIED BY 'plug_dest_passwd'; connect(localhost,plug,plug_dest,test,MYSQL_PORT,MYSQL_SOCK); ERROR 28000: Access denied for user 'plug'@'localhost' (using password: YES) GRANT PROXY ON plug_dest TO plug; select USER(),CURRENT_USER(); USER() CURRENT_USER() plug@localhost plug_dest@% DROP USER plug; DROP USER plug_dest; set global server_audit_query_log_limit= 15; select (1), (2), (3), (4); 1 2 3 4 1 2 3 4 select 'A', 'B', 'C', 'D'; A B C D A B C D set global server_audit_query_log_limit= 1024; drop database sa_db; ======================================================================= Check server_audit_current_log status ======================================================================= set global server_audit_file_path='.'; show status like 'server_audit_current_log'; Variable_name Value server_audit_current_log HOME_DIR/server_audit.log set global server_audit_file_path=''; show status like 'server_audit_current_log'; Variable_name Value server_audit_current_log server_audit.log set global server_audit_file_path=' '; show status like 'server_audit_current_log'; Variable_name Value server_audit_current_log server_audit.log set global server_audit_file_path='nonexisting_dir/'; show status like 'server_audit_current_log'; Variable_name Value server_audit_current_log server_audit.log show variables like 'server_audit%'; Variable_name Value server_audit_events server_audit_excl_users server_audit_file_path server_audit_file_rotate_now OFF server_audit_file_rotate_size 1000000 server_audit_file_rotations 9 server_audit_incl_users root, plug_dest server_audit_loc_info server_audit_logging ON server_audit_output_type file server_audit_query_log_limit 1024 server_audit_syslog_facility LOG_USER server_audit_syslog_ident mysql-server_auditing server_audit_syslog_info server_audit_syslog_priority LOG_INFO ======================================================================= Uninstall plugins ======================================================================= uninstall plugin server_audit; Warnings: Warning 1620 Plugin is busy and will be uninstalled on shutdown uninstall plugin test_plugin_server; ======================================================================= Dump the audit logs, replace the timestamp and the hostname with constant values ======================================================================= TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'set global server_audit_logging=on',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'set global server_audit_incl_users= repeat("\'user\',", 10000)',1231,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'show variables like \'server_audit_incl_users\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'set global server_audit_excl_users= repeat("\'user\',", 10000)',1231,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'show variables like \'server_audit_excl_users\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,CONNECT,mysql,,0,SOCKET TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,DISCONNECT,mysql,,0,SOCKET TIME,HOSTNAME,no_such_user,localhost,CONNECTION_ID,QUERY_ID,FAILED_CONNECT,,,1045,SOCKET TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'set global server_audit_incl_users=\'odin, dva, tri\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'set global server_audit_incl_users=\'odin, root, dva, tri\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'create table t2_default (id int)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'set global server_audit_excl_users=\'odin, dva, tri\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'insert into t1_default values (1), (2)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'select * from t1_default',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'set global server_audit_incl_users=\'odin, root, dva, tri\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'insert into t2_default values (1), (2)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'select * from t2_default',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'alter table t1_default rename renamed_t1_default',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'set global server_audit_events=\'connect,query\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'select 1,\n2,\n# comment\n3',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'insert into t2_default values (1), (2)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'select * from t2_default',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'select * from t_doesnt_exist',1146,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'syntax_error_query',1064,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'drop table renamed_t1_default, t2_default',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'show variables like \'server_audit%\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'set global server_audit_events=\'\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'create database sa_db',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,CONNECT,test,,0,SOCKET TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,test,'create table t1_empty (id2 int)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,test,'insert into t1_empty values (1), (2)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,test,'select * from t1_empty',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,test,'drop table t1_empty',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'use sa_db',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'create table sa_t1_empty(id int)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'insert into sa_t1_empty values (1), (2)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'drop table sa_t1_empty',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'drop database sa_db',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,DISCONNECT,,,0,SOCKET TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,,'create database sa_db',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'use sa_db',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'CREATE USER \'u1_empty\'@\'%\' IDENTIFIED BY ',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'GRANT ALL ON sa_db TO u2_empty IDENTIFIED BY *****',1064,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'SET PASSWORD FOR `u1_empty`@`%`=',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'CREATE USER \'u3_empty\'@\'%\' IDENTIFIED BY ',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'ALTER USER \'u3_empty\'@\'%\' IDENTIFIED BY ',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'drop user u1_empty, u3_empty',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'create table t1_ddl(id int)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'drop table t1_ddl',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'create table t1_ddl_dml(id int)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'insert into t1_ddl_dml values (1), (2)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'select * from t1_ddl_dml',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'select 2',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'drop table t1_ddl_dml',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'insert into t1_dml values (1), (2)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'select * from t1_dml',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'select 2',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'(select 2)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'/*! select 2*/',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'/*comment*/ select 2',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'CREATE USER \'u1_dcl\'@\'%\' IDENTIFIED BY ',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'GRANT ALL ON sa_db TO u2_dcl IDENTIFIED BY *****',1064,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'SET PASSWORD FOR `u1_dcl`@`%`=',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'SET PASSWORD FOR u1=',1064,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'CREATE USER \'u3_dcl\'@\'%\' IDENTIFIED BY ',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'drop user u1_dcl, u3_dcl',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'insert into t1_no_select values (1), (2)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_events=\'\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_incl_users=\'user1\'',0,, TIME,HOSTNAME,user1_empty,localhost,CONNECTION_ID,QUERY_ID,CONNECT,sa_db,,0,SOCKET TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_logging= off',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_logging= on',0,, TIME,HOSTNAME,user1_empty,localhost,CONNECTION_ID,QUERY_ID,DISCONNECT,sa_db,,0,SOCKET TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'SHOW GLOBAL STATUS LIKE \'Threads_connected\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'SELECT 1 <= 1',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'drop user user1_empty@localhost',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_incl_users=\'root, plug_dest\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'CREATE USER \'plug\'@\'%\' IDENTIFIED WITH \'test_plugin_server\' AS \'plug_dest\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'CREATE USER \'plug_dest\'@\'%\' IDENTIFIED BY ',0,, TIME,HOSTNAME,plug,localhost,CONNECTION_ID,QUERY_ID,FAILED_CONNECT,,,1045,SOCKET TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'GRANT PROXY ON \'plug_dest\'@\'%\' TO \'plug\'@\'%\'',0,, TIME,HOSTNAME,plug,localhost,CONNECTION_ID,QUERY_ID,CONNECT,test,,0,SOCKET TIME,HOSTNAME,plug,localhost,CONNECTION_ID,QUERY_ID,PROXY_CONNECT,test,`plug_dest`@``,0,SOCKET TIME,HOSTNAME,plug,localhost,CONNECTION_ID,QUERY_ID,QUERY,test,'select USER(),CURRENT_USER()',0,, TIME,HOSTNAME,plug,localhost,CONNECTION_ID,QUERY_ID,DISCONNECT,test,,0,SOCKET TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'DROP USER plug',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'DROP USER plug_dest',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global serv',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'select (1), (2)',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'select \'A\', ',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_query_log_limit= 1024',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'drop database sa_db',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_file_path=\'.\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_file_path=\'.\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'show status like \'server_audit_current_log\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_file_path=\'\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_file_path=\'\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'show status like \'server_audit_current_log\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_file_path=\' \'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_file_path=\' \'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'show status like \'server_audit_current_log\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_file_path=\'nonexisting_dir/\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'set global server_audit_file_path=\'nonexisting_dir/\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'show status like \'server_audit_current_log\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'show variables like \'server_audit%\'',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'uninstall plugin server_audit',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'SHOW WARNINGS',0,, TIME,HOSTNAME,root,localhost,CONNECTION_ID,QUERY_ID,QUERY,sa_db,'uninstall plugin test_plugin_server',0,, ======================================================================= Remove the temporary audit logs =======================================================================