This document describes how to enable Database Audit for TencentDB for SQL Server instances.
Prerequisites
Supported Versions and Architecture
Database Audit currently supports the following database versions: SQL Server 2012, 2014, 2016, 2017, 2019, and 2022 Enterprise versions.
Database Audit currently supports the following instance architectures: Dual-node (local disk), Read-Only instances (local disk), Single-node (cloud disk), Dual-node (cloud disk), Multi-node (cloud disk), and Read-Only instances (cloud disk).
Performance Impact Notes
Kind reminder: After Database Audit is enabled for TencentDB for SQL Server instances, the CPU overhead is approximately 5%.
Operation Steps
2. In the left sidebar, select Database Audit.
3. After selecting a region above, on the Audit Instance page, click Audit Log Storage Status and select the Disabled option to filter out instances with audit not enabled.
4. Locate the target instance in the audit instance list (or quickly find it by filtering with resource attributes in the search box), in its Operation column, click Enable Database Audit.
Note:
Batch enabling of audit services is supported. On the audit instance list page, select multiple target instances and click Enable Database Audit at the top to go to the setup page.
5. On the Enable Audit Service page, complete the audit instance selection, configure the audit service settings, read and select the Tencent Cloud Service Agreement, and click OK.
5.1 Select Audit Instance
Under the audit instance selection section, the system automatically selects the instances chosen in Step 4 by default. You can also modify target instances in this window (select other instances or multiple instances), or quickly locate target instances by searching with Instance ID/Name in the search box. After completing instance selection, go to the audit rule setup.
In the audit service settings, you need to configure the log retention period and the duration for high-frequency and low-frequency storage, read and select the Tencent Cloud Service Agreement, and then click OK to enable the audit service.
|
Log Retention Period | Set the retention period for audit logs, unit: days. Supported options include 7, 30, 90, 180, 365, 1095, and 1825 days. |
Frequent Access Storage Period | Frequent Access Storage represents ultra-high-performance storage media with excellent query performance. Unit: days. After the storage duration is set, audit data within the specified duration will be stored in Frequent Access Storage. Data exceeding the Frequent Access Storage duration will automatically transition to Infrequent Access Storage. Both storage types support identical audit capabilities and differ only in performance. For example: if the log retention period is set to 30 days and the Frequent Access Storage duration is set to 7 days, then the Infrequent Access Storage duration defaults to 23 days. |