Configure and access audit logs for Azure Database for MySQL in the Azure portal
APPLIES TO: Azure Database for MySQL - Single Server
Azure Database for MySQL - Single Server is on the retirement path. We strongly recommend for you to upgrade to Azure Database for MySQL - Flexible Server. For more information about migrating to Azure Database for MySQL - Flexible Server, see What's happening to Azure Database for MySQL Single Server?
You can configure the Azure Database for MySQL audit logs and diagnostic settings from the Azure portal.
To step through this how-to guide, you need:
Configure audit logging
It is recommended to only log the event types and users required for your auditing purposes to ensure your server's performance is not heavily impacted.
Enable and configure audit logging.
Sign in to the Azure portal.
Select your Azure Database for MySQL server.
Under the Settings section in the sidebar, select Server parameters.
Update the audit_log_enabled parameter to ON.
Select the event types to be logged by updating the audit_log_events parameter.
Add any MySQL users to be included or excluded from logging by updating the audit_log_exclude_users and audit_log_include_users parameters. Specify users by providing their MySQL user name.
Once you have changed the parameters, you can click Save. Or you can Discard your changes.
Set up diagnostic logs
Under the Monitoring section in the sidebar, select Diagnostic settings.
Click on "+ Add diagnostic setting"
Provide a diagnostic setting name.
Specify which data sinks to send the audit logs (storage account, event hub, and/or Log Analytics workspace).
Select "MySqlAuditLogs" as the log type.
Once you've configured the data sinks to pipe the audit logs to, you can click Save.
Access the audit logs by exploring them in the data sinks you configured. It may take up to 10 minutes for the logs to appear.