Greetings everyone! Let’s discuss a 3rd Party auditing
solution to MySQL and how we can leverage MongoDB® to make sense
out of all of that data.
The McAfee MySQL Audit plugin does a great job of capturing, at
low level, activities within a MySQL server. It does this through
some non-standard APIs which is why installing and configuring
the plugin can be a bit difficult. The audit information is
stored in JSON format, in a text file, by default.
There is 1 JSON object for each action that takes place within
MySQL. If a user logs in, there’s an object. If that user queries
a table, there’s an object. Imagine 1000 active connections from
an application, each doing 2 queries per second. That’s 2000 JSON
objects per second being written to the audit log. After 24
hours, that would be almost 173,000,000 audit entries!
How does one make sense of that many JSON objects? One option
would be to write your own parser in …
[Read more]