修改审计策略

Posted 2021-09-13 瀚高PG实验室

目录
环境
文档用途
详细信息

环境
系统平台：Linux x86-64 Red Hat Enterprise Linux 7
版本：4.3.4.7
文档用途
本文档用于修改瀚高安全版数据库审计策略配置

详细信息
1、查看审计策略配置

审计管理员syssao可以通过"select show_audit_param();"来查看当前的审计策略配置

[root@host ~]# psql -U syssao -d highgo

highgo=> select show_audit_param();

       show_audit_param            

---

hg_audit_Log = all, +

hg_audit_LogCatalog = on, +

hg_audit_LogClient = off, +

hg_audit_LogLevel = log, +

hg_audit_LogParameter = off, +

hg_audit_LogRelation = off, +

hg_audit_LogStatementOnce = off, +

hg_audit_Role = , +

hg_audit_filename = %d_%H, +

hg_audit_truncate_on_rotation = off, +

hg_audit_RotationAge = 1440 min, +

hg_audit_RotationSize = 10240 KB, +

2、修改审计策略配置

审计管理员syssao可以通过"select set_audit_param(‘参数’,‘选项’);"修改审计策略配置，重启数据库使参数生效

highgo=> --审计范围修改为ddl

highgo=> select set_audit_param(‘hg_audit_Log’,‘ddl’);

     set_audit_param         

---

set configuration successfully.

(1 row)

highgo=> --开启审计日志循环覆盖

highgo=> select set_audit_param(‘hg_audit_truncate_on_rotation’,‘on’);

     set_audit_param         

---

set configuration successfully.

(1 row)

highgo=> --审计日志覆盖间隔为一周，60247=10080

highgo=> select set_audit_param(‘hg_audit_RotationAge’,‘10080’);

     set_audit_param         

---

set configuration successfully.

(1 row)

highgo=> --审计日志名称以星期缩写格式命名

highgo=> select set_audit_param(‘hg_audit_filename’,’%a’);

     set_audit_param         

---

set configuration successfully.

(1 row)

highgo=> \\q

[root@host ~]# pg_ctl restart