| PCI Requirement | Audit Plugin Feature | |----------------|----------------------| | 10.2.1 – All administrative actions | Log command=GRANT , DROP USER , etc. | | 10.2.2 – All failed logins | Filter event=connect, status=1 | | 10.2.4 – Privilege changes | Audit table mysql.user access | | 10.3.1 – Log timestamps | JSON includes ISO 8601 UTC timestamp | | 10.5 – Secure audit trails | Write to separate partition/syslog |
SET GLOBAL audit_log_exclude_commands = 'COM_PING,COM_SLEEP,COM_STATISTICS'; percona audit plugin
The Percona Audit Plugin is an open-source plugin (compatible with MySQL, Percona Server, and MariaDB) that tracks database activity to help meet compliance standards and secure your data. | PCI Requirement | Audit Plugin Feature |