<div id="docs-body">
 <div class="section">
  <div class="titlepage">
   <div>
    <div>
     <h4 class="title">
      <a name="audit-log-security">
      </a>
      8.4.5.3 MySQL Enterprise Audit Security Considerations
     </h4>
    </div>
   </div>
  </div>
  <p>
   By default, contents of audit log files produced by the audit
        log plugin are not encrypted and may contain sensitive
        information, such as the text of SQL statements. For security
        reasons, audit log files should be written to a directory
        accessible only to the MySQL server and to users with a
        legitimate reason to view the log. The default file name is
   <code class="filename">
    audit.log
   </code>
   in the data directory. This can
        be changed by setting the
   <a class="link" href="audit-log-reference.html#sysvar_audit_log_file">
    <code class="literal">
     audit_log_file
    </code>
   </a>
   system variable
        at server startup. Other audit log files may exist due to log
        rotation.
  </p>
  <p>
   For additional security, enable audit log file encryption. See
   <a class="xref" href="audit-log-logging-configuration.html#audit-log-file-encryption" title="Encrypting Audit Log Files">
    Encrypting Audit Log Files
   </a>
   .
  </p>
 </div>
 <br/>
</div>
