<div id="docs-body">
 <div class="section">
  <div class="titlepage">
   <div>
    <div>
     <h4 class="title">
      <a name="audit-log-elements">
      </a>
      8.4.5.1 Elements of MySQL Enterprise Audit
     </h4>
    </div>
   </div>
  </div>
  <p>
   MySQL Enterprise Audit is based on the audit log plugin and related elements:
  </p>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      A server-side plugin named
      <code class="literal">
       audit_log
      </code>
      examines auditable events and determines whether to write
            them to the audit log.
     </p>
    </li>
    <li class="listitem">
     <p>
      A set of functions enables manipulation of filtering
            definitions that control logging behavior, the encryption
            password, and log file reading.
     </p>
    </li>
    <li class="listitem">
     <p>
      Tables in the
      <code class="literal">
       mysql
      </code>
      system database
            provide persistent storage of filter and user account data,
            unless you set the
      <a class="link" href="audit-log-reference.html#sysvar_audit_log_database">
       <code class="literal">
        audit_log_database
       </code>
      </a>
      system
            variable at server startup to specify a different database.
     </p>
    </li>
    <li class="listitem">
     <p>
      System variables enable audit log configuration and status
            variables provide runtime operational information.
     </p>
    </li>
    <li class="listitem">
     <p>
      The
      <a class="link" href="privileges-provided.html#priv_audit-admin">
       <code class="literal">
        AUDIT_ADMIN
       </code>
      </a>
      privilege
            enable users to administer the audit log, and the
      <a class="link" href="privileges-provided.html#priv_audit-abort-exempt">
       <code class="literal">
        AUDIT_ABORT_EXEMPT
       </code>
      </a>
      privilege
            enables system users to execute queries that would otherwise
            be blocked by an
      <span class="quote">
       “
       <span class="quote">
        abort
       </span>
       ”
      </span>
      item in the audit log
            filter.
     </p>
    </li>
   </ul>
  </div>
 </div>
 <br/>
</div>
