Percona Audit Plugin _verified_ -

"class": "table_access", "command": ["DROP", "ALTER", "TRUNCATE"], "log": true

SELECT VARIABLE_VALUE FROM performance_schema.global_status WHERE VARIABLE_NAME = 'audit_log_lost_events'; If > 0, increase audit_log_buffer_size (default 1MB → set to 4–8MB). percona audit plugin

SET GLOBAL audit_log_logging_events = 'connect,query,table_access'; : "log": true "rule": "user": "monitor_user"

status: 1 = failure. "rule": "class": "table_access", "table": "payments", "command": ["DROP", "TRUNCATE", "DELETE", "UPDATE"], "log": true percona audit plugin

"rule": "user": "monitor_user", "log": false