Constraints

Database audit is subject to certain constraints.

The following types of databases on the management console can be audited in out-of-path mode:

Databases of some types and versions can be audited without using agents, as shown in Table 1.

Table 1 Agent-free relational databases
Type	Supported Edition
RDS for SQLServer	All editions are supported by default.
RDS for MySQL	5.6 (5.6.51.1 or later) 5.7 (5.7.29.2 or later) 8.0 (8.0.20.3 or later)
PostgreSQL NOTICE: If the size of an SQL statement exceeds 4 KB, the SQL statement will be truncated during auditing. As a result, the SQL statement is incomplete.	7.4 8.0, 8.1, 8.2, 8.3, 8.4 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6 10.0, 10.1, 10.2, 10.3, 10.4, 10.5 11 12 13 14 15 16

The following database versions can be audited.

Table 2 Database types and versions supported by database audit
Database Type	Edition
MySQL	5.0, 5.1, 5.5, 5.6, 5.7 8.0 (8.0.11 and earlier)
Oracle (The Oracle database uses closed-source protocol and has complex adaptation versions. If you need to audit the Oracle database, contact customer service.)	11g 11.1.0.6.0, 11.2.0.1.0, 11.2.0.2.0, 11.2.0.3.0, and 11.2.0.4.0 12c 12.1.0.2.0, 12.2.0.1.0 19c
PostgreSQL	7.4 8.0, 8.1, 8.2, 8.3, 8.4 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6 10.0, 10.1, 10.2, 10.3, 10.4, 10.5 11 12 13 14
SQL Server	2008 2012 2014 2016 2017
GaussDB(for MySQL)	8.0
DWS	1.5 8.1
DAMENG	DM8
KINGBASE	V8
SHENTONG	V7.0
HighGo	V6.0
GaussDB	1.3 Enterprise Edition 1.4 Enterprise Edition
Hbase	1.3.1 2.2.3
Hive	1.2.2 2.3.9 3.1.2 3.1.3

To use database audit, you need to install its agent on database nodes or application nodes. The database audit agent can run on the 64-bit Linux.

For more information, see Table 3.

Table 3 Supported Linux OS versions
System Name	System version
CentOS	CentOS 7.0 (64bit) CentOS 7.1 (64bit) CentOS 7.2 (64bit) CentOS 7.3 (64bit) CentOS 7.4 (64bit) CentOS 7.5 (64bit) CentOS 7.6 (64bit) CentOS 7.8 (64bit) CentOS 7.9 (64bit) CentOS 8.0 (64bit) CentOS 8.1 (64bit) CentOS 8.2 (64bit)
Debian	Debian 7.5.0 (64bit) Debian 8.2.0 (64bit) Debian 8.8.0 (64bit) Debian 9.0.0 (64bit) Debian 10.0.0 (64bit)
Fedora	Fedora 24 (64bit) Fedora 25 (64bit)
SUSE	SUSE 11 SP4 (64bit) SUSE 12 SP1 (64bit) SUSE 12 SP2 (64bit)
Ubuntu	Ubuntu 14.04 (64bit) Ubuntu 16.04 (64bit) Ubuntu 18.04 (64bit) Ubuntu 20.04 (64-bit)
EulerOS	Euler 2.2 (64bit) Euler 2.3 (64bit)
Oracle Linux	Oracle Linux 6.9 (64bit) Oracle Linux 7.4 (64bit)

If SSL is enabled for a database, the database cannot be audited. To use database audit, disable SSL first.
Ensure the VPC of the database audit instance is the same as that of the node (application side or database side) where you plan to install the database audit agent. Otherwise, the instance will be unable to connect to the agent or perform audit.
In some SQL Server databases, complex declare statements, select functions, and symbol statements that cannot be identified by the system may fail to be parsed.

Была ли эта статья полезна?