Enabling SQL Audit

After SQL audit is enabled for RDS for PostgreSQL DB instances, the system records SQL operations and uploads logs every half an hour or when the size of a single record reaches 100 MB. The generated audit logs are stored in OBS.

• SQL audit is disabled for DB instances by default because enabling it increases database loads.
• To ensure performance, audit logs use the Coordinated Universal Time (UTC) and are not affected by time zone settings.
• To enable SQL audit, you need to install the pgAudit extension first. For details, see pgAudit.

Only the following versions support SQL audit. If your DB engine version is too low, upgrade it to the latest version by referring to Upgrading a Minor Version.

• Latest minor versions of RDS for PostgreSQL 12 and 13

• All versions of RDS for PostgreSQL 14 and above

1. Log in to the management console.
2. Click in the upper left corner and select a region and a project.
3. Click in the upper left corner of the page and choose Database > Relational Database Service.
4. On the Instances page, click the target instance name to go to the Basic Information page.
5. In the navigation pane, choose SQL Audits. Click Set SQL Audit.
6. In the displayed dialog box, set the number of days for storing SQL audit logs and click OK.

   Audit logs can be retained from 1 to 3,660 days and are retained for 7 days by default.

7. To disable SQL audit, toggle off the Audit Logging switch, select the confirmation check box, and click OK.
   Notice

   After SQL audit is disabled, all audit logs will be deleted immediately and cannot be recovered. Exercise caution when performing this operation.