Meta tags:

Headings (most frequently used words):

audit, cloud, rules, rest, curl, linux, macos, or, shell, powershell, windows, response, database, mysql, auditing, sql, for, console, gcloud, v1beta4, v1, and, plugin, view, logs, log, use, stay, organized, with, collections, save, categorize, content, based, on, your, preferences, before, you, begin, enable, the, configure, disable, examples, of, troubleshoot, what, next, data, access, privileges, required, users, settings, manage, create, list, update, delete, operation, groups, records, in, logging, products, pricing, support, resources, engage, format,

Text of the page (most frequently used words):
the (439), and (126), audit (116), sql (108), cloud (103), instance (94), for (87), mysql (80), following (80), gcloud (79), you (74), user (65), use (60), #database (58), using (56), request (55), instances (53), project (51), with (49), json (48), command (44), can (41), com (41), auth (40), connect (39), from (37), name (37), logs (35), googleapis (35), list (34), set (33), access (31), projects (31), your (31), manage (30), create (30), call (30), outval (30), outmsg (30), https (30), sqladmin (30), that (29), plugin (29), data (29), rules (28), operation (28), string (28), flags (27), select (27), flag (26), account (26), type (26), all (25), running (25), stored (24), rule (24), patch (23), example (22), update (22), v1beta4 (22), overview (22), operations (21), file (21), this (20), note (20), about (19), see (19), value (19), cloudsql_mysql_audit (19), save (19), google (18), delete (18), server (18), headers (18), body (18), cli (18), status (17), not (17), configure (17), application (17), have (17), are (16), error (16), procedure (16), execute (16), query (16), log (16), content (15), reload (15), active (15), check (15), users (15), changes (14), cloudsql_create_audit_rule (14), comma (14), separated (14), logged (14), currently (14), host (14), auditing (13), response (13), table (13), named (13), shell (13), when (12), default (12), statement (12), before (12), user1 (12), cred (12), print (12), token (12), authorization (12), bearer (12), method (12), charset (12), utf (12), expand (12), assumes (12), login (12), init (12), curl (12), one (12), settings (12), parameters (12), upgrade (12), code (11), password (11), make (11), object (11), enable (11), down (10), only (10), procedures (10), input (10), should (10), view (10), ops (10), obj (10), databases (10), privileges (10), private (10), quickstart (10), tables (9), read (9), run (9), show (9), which (9), any (9), invoke (9), click (9), console (9), iam (9), description (9), output (9), high (9), import (9), engine (9), send (8), db1 (8), choose (8), representing (8), availability (8), external (8), thumb (7), more (7), page (7), its (7), policies (7), add (7), grant (7), remove (7), into (7), replication (7), recovery (7), activities (7), windows (7), these (7), options (7), unsuccessful (7), message (7), client (7), service (7), success (7), storage (7), management (7), vector (7), managed (7), resources (6), information (6), time (6), create_user (6), but (6), values (6), replica (6), cloudsql_reload_audit_rule (6), option (6), then (6), off (6), table1 (6), kind (6), targetlink (6), pending (6), inserttime (6), 2020 (6), 21t22 (6), 981z (6), operationtype (6), targetid (6), selflink (6), targetproject (6), receive (6), similar (6), webrequest (6), contenttype (6), infile (6), uri (6), powershell (6), automatically (6), linux (6), macos (6), databaseflags (6), http (6), url (6), replacements (6), rest (6), instance_name (6), open (6), number (6), previous (6), combinations (6), op_result (6), psw (6), usage (6), issues (6), backups (6), monitor (6), performance (6), export (6), replicas (6), authentication (6), samples (5), under (5), filter (5), cloudsql_mysql_audit_data_masking_cmds (5), cloudsql_list_audit_rule (5), primary (5), they (5), must (5), reload_mode (5), restart (5), start (5), replace (5), has (5), disable (5), objects (5), cmd (5), localhost (5), revoke (5), int (5), maximum (5), new (5), cloudsql_mysql_audit_data_masking_regex (5), tools (5), connection (5), certificates (5), ssl (5), tls (5), encryption (5), embeddings (5), app (5), proxy (5), version (5), português (4), español (4), system (4), understand (4), other (4), need (4), normally (4), same (4), such (4), requires (4), special (4), characters (4), successful (4), after (4), want (4), supported (4), variables (4), cloudsql_update_audit_rule (4), commands (4), work (4), generated (4), existing (4), cloudsql_mysql_audit_xxx (4), enabling (4), troubleshoot (4), been (4), edit (4), insert (4), reference (4), might (4), thread (4), groups (4), failure (4), multiple (4), table2 (4), db2 (4), limitations (4), both (4), search (4), flag_value (4), flag_name (4), write (4), identified (4), migration (4), compute (4), public (4), reconfigure (4), optimize (4), language (4), build (4), best (4), practices (4), custom (4), disaster (4), control (4), organization (4), major (4), maintenance (4), free (4), sign (3), terms (3), last (3), except (3), details (3), full (3), either (3), masking (3), alter_user (3), created (3), even (3), change (3), some (3), aren (3), also (3), first (3), updating (3), wanted (3), entry (3), plugins (3), character (3), dml (3), setting (3), confirm (3), drop (3), menu (3), scroll (3), section (3), mysqlauditentry (3), activity (3), msgtype (3), size (3), address (3), format (3), given (3), logging (3), enabled (3), supports (3), integer (3), rule_id (3), cloudsql_delete_audit_rule (3), length (3), generate (3), take (3), disk (3), controls (3), how (3), force (3), administrator (3), auditor (3), guides (3), observability (3), analytics (3), capacity (3), reduce (3), prevent (3), backup (3), indexes (3), insights (3), mcp (3), queries (3), capture (3), model (3), endpoint (3), applications (3), files (3), restore (3), standard (3), migrate (3), vpc (3), pooling (3), connectors (3), customer (3), tags (3), secure (3), place (3), trial (3), product (3), 한국어 (2), 日本語 (2), עברית (2), brasil (2), italiano (2), indonesia (2), français (2), américa (2), latina (2), deutsch (2), english (2), join (2), site (2), youtube (2), events (2), architecture (2), started (2), support (2), pricing (2), products (2), updated (2), 2026 (2), utc (2), licensed (2), license (2), feedback (2), learn (2), two (2), increase (2), variable (2), session (2), innodb_lock_wait_timeout (2), wait (2), create_procedure (2), argument (2), complex (2), include (2), executed (2), changed (2), rows (2), affected (2), though (2), was (2), disconnect (2), global (2), fields (2), audited (2), functions (2), features (2), cloudsql_create_canonical_rules (2), returns (2), cloudsql_mysql_audit_max_query_length (2), doesn (2), threads (2), troubleshooting (2), examples (2), chunkindex (2), chunkcount (2), test (2), errcode (2), root (2), queryid (2), threadid (2), date (2), index (2), field (2), includes (2), username (2), uses (2), differ (2), privuser (2), sent (2), cloudaudit (2), project_name (2), explorer (2), through (2), advanced (2), included (2), definitions (2), collections (2), ids (2), lets (2), separate (2), 1000 (2), generates (2), user2 (2), 2048 (2), actions (2), table3 (2), db3 (2), filters (2), step (2), those (2), later (2), auditors (2), disabled (2), effect (2), each (2), indicate (2), asterisk (2), wildcard (2), used (2), literally (2), configuration (2), writer (2), contents (2), buffer (2), milliseconds (2), means (2), regex (2), applied (2), stop (2), would (2), without (2), statements (2), regular (2), behavior (2), tells (2), fails (2), administrators (2), could (2), topic (2), documentation (2), sdk (2), languages (2), frameworks (2), infrastructure (2), costs (2), security (2), monitoring (2), networking (2), industry (2), solutions (2), distributed (2), hybrid (2), multicloud (2), pipelines (2), hosting (2), development (2), known (2), authorized (2), networks (2), loss (2), automated (2), memory (2), cache (2), improve (2), enterprise (2), plus (2), assistance (2), agents (2), saved (2), predictions (2), dump (2), perform (2), point (2), back (2), replicate (2), pool (2), pools (2), regional (2), kubernetes (2), flexible (2), phpmyadmin (2), authorize (2), services (2), keys (2), cmek (2), parameterized (2), views (2), studio (2), built (2), minor (2), network (2), edition (2), updates (2), shrink (2), environment (2), cross (2), technology (2), areas (2), close (2), subscribe, newsletter, our, third, decade, climate, action, cookies, privacy, tech, twitter, blog, engage, training, certification, center, getting, github, release, notes, community, forums, contact, sales, marketplace, easy, easytounderstand, solved, problem, solvedmyproblem, otherup, hard, hardtounderstand, incorrect, sample, incorrectinformationorsamplecode, missing, missingtheinformationsamplesineed, otherdown, tell, otherwise, noted, java, registered, trademark, oracle, affiliates, developers, apache, creative, commons, attribution, what, next, caused, sessions, try, modify, happens, frequently, increased, globally, just, 120, got, lock, timeout, exceeded, trying, works, while, creating, cmds, isn, masked, cloudsql_mysql_audit_data_masking_regexp, replicated, read_only, considered, ignore, specific, related, listed, since, affecting, cases, non, db_name, intended, called, internally, specifying, flagfile, general_log, tried, crash, audits, made, cloudsql_xxxx_audit_rule, audit_log_rules_expanded, audit_log_rules, didn, turn, 1193, unknown, described, needed, newly, added, why, issue, single, obj_type, 1146, priv_user, 26763, 750, 2021, 11t06, 163603z, always, chunk, starts, chunk_index, total, chunks, than, 90k, cloudsql_mysql_audit_event_split_threshold, directly, objtype, indicates, gcp, gcpiamaccount, authenticated, privilege, checking, timestamp, indicating, event, represent, alternatively, data_access, resource, protopayload, 2fdata_access, logname, cloudsql_database, interface, sure, records, call_procedure, show_triggers, show_relaylog_events, show_grants, show_function_code, show_events, show_create_trigger, show_create_event, show_procedure_code, show_create_proc, show_create_func, show_binlog_events, revoke_all, dcl, rename_user, rename_table, drop_view, drop_user, drop_trigger, drop_table, drop_procedure, drop_index, drop_function, drop_event, drop_db, create_view, create_udf, create_trigger, create_table, create_index, create_function, create_event, create_db, alter_table, alter_procedure, alter_function, alter_event, alter_db, ddl, update_multi, truncate, replace_select, load, insert_select, delete_multi, dql, simplify, creation, reloading, changeable, however, unless, parameter, respectively, names, suffix, prefix, addition, hosts, backtick, matches, ble, there, four, above, period, writes, reaching, forced, notification, completed, 500, cloudsql_mysql_audit_log_write_period, record, don, recorded, saves, space, resulting, lower, cost, limitation, empty, filtering, clause, describing, appear, follows, specified, passwords, substituted, mask, expression, compliant, pcres, perl, compatible, expressions, tune, below, altered, restarting, configuring, overwrites, previously, keep, ones, specifically, specify, followed, equals, result, charges, additional, changing, activation, states, visible, column, information_schema, plugin_status, like, prevents, being, unloaded, runtime, tries, unload, occurs, uninstall, force_plus_permanent, initialization, does, words, forces, initialize, runs, who, including, super, cloudql_list_audit_rule, them, needs, refer, required, begin, referred, describes, loading, postgresql, categorize, based, preferences, stay, organized, home, orphan, diagnose, debug, messages, looker, rotate, broad, ranges, underprovisioned, overprovisioned, idle, temporary, increasing, retention, out, cpu, reliability, enforce, apply, recommendations, advisor, natural, querydata, conversational, securing, agent, interactions, remote, preview, register, interact, models, llm, powered, langchain, embedding, workflow, online, integrate, vertex, generative, develop, cancel, parallel, csv, importing, exporting, deleted, enhanced, legacy, percona, xtrabackup, physical, large, replicating, autoscaling, lag, promote, outside, connections, operator, dns, certificate, authority, across, vpcs, brute, protection, endpoints, side, attach, fine, grained, conditions, roles, permissions, identity, predefined, secret, manager, handle, secrets, residency, knowledge, catalog, gemini, api, collation, operational, guidelines, general, migrating, versions, peering, allowlists, self, connectivity, tests, locations, deletion, label, clone, region, machine, series, plan, prepare, local, computer, get, key, editions, discover, skip, main,

Text of the page (random words):
ud sql for mysql with agents use the cloud sql remote mcp server best practices for securing agent interactions with mcp use saved queries overview create and manage saved queries build data agents with conversational analytics query database in natural language with querydata monitor and optimize about database observability monitor and troubleshoot with ai assistance audit audit logs mysql database auditing use mysql database auditing performance capture overview configure performance capture view performance capture logs query performance use query insights use index advisor monitor active queries system performance monitor instances view instance logs use system insights monitor cloud sql using the database insights mcp server apply recommendations create indexes or reconfigure join settings disable public ip enable database auditing enforce ssl tls encryption improve instance reliability by enabling high availability improve performance with enterprise plus increase the table open cache manage open tables and open table definitions manage high number of tables monitor disk availability optimize high cpu usage optimize high memory usage optimize instances with high number of out of memory events prevent data loss by enabling automated backups prevent data loss by increasing backup retention reconfigure connection settings reconfigure log settings reconfigure temporary table settings reduce idle cloud sql instances reduce overprovisioned cloud sql instances reduce underprovisioned cloud sql instances remove authorized networks remove broad public ip ranges rotate server certificates set instance password policies set user password policies use looker with cloud sql troubleshoot known issues troubleshoot error messages debug connection issues diagnose issues orphan tables issues updating storage capacity high disk usage issues ai and ml application development application hosting compute data analytics and pipelines databases distributed hybrid and multicloud industry solutions migration networking observability and monitoring security storage access and resources management costs and usage management infrastructure as code sdk languages frameworks and tools home documentation databases cloud sql mysql guides send feedback use mysql database auditing stay organized with collections save and categorize content based on your preferences mysql postgresql sql server this topic describes how to enable and use the cloud sql for mysql audit plugin for an overview see mysql database auditing for more information about mysql plugins see mysql plugin loading note in this topic administrators and auditors are referred to as audit users before you begin data access audit logs enable and configure data access audit logs see configure data access audit logs privileges required for audit users you must have execute privileges on the audit stored procedures to run them if an administrator needs to change an auditor s access privileges to the audit stored procedures they should use the grant or revoke command in the mysql client for details about the user privileges refer to mysql user privileges for example if an administrator wanted to grant access to an auditor named user to manage the audit rules they could grant the privileges using the following statement create user user identified by password grant execute on procedure mysql cloudsql_list_audit_rule to user if that administrator later wanted to revoke access to the auditor they could revoke the privileges using the following statement revoke all on procedure mysql cloudql_list_audit_rule from user by default users created using cloud sql except iam users are administrators who have all privileges except file and super including all privileges to the audit stored procedures iam database users by default have no privileges enable the cloud sql for mysql audit plugin the cloud sql for mysql audit plugin cloudsql_mysql_audit controls the auditing behavior for a given database instance to use the plugin you must first enable it on the cloud sql instance to enable the cloudsql_mysql_audit plugin use one of the following options cloudsql_mysql_audit on tells the server to enable the plugin if the plugin fails to initialize the server runs with the plugin disabled cloudsql_mysql_audit force tells the server to enable the plugin but if plugin initialization fails the server does not start in other words this option forces the server to run with the plugin enabled or not at all cloudsql_mysql_audit force_plus_permanent like force but also prevents the plugin from being unloaded at runtime if a user tries to unload the plugin with uninstall plugin an error occurs plugin activation states are visible in the plugin_status column of the information_schema plugins table note changing the value of this audit flag requires a mysql server restart each time note enabling logs might result in cloud logging charges for the additional logs usage console in the google cloud console go to the cloud sql instances page go to cloud sql instances open the instance and click edit scroll down to the flags section to set a flag that has not been set on the instance before click add flag choose cloudsql_mysql_audit from the drop down menu and set its value to on click save to save your changes confirm your changes under flags on the overview page gcloud replace the following instance_name the name of the instance you are setting the flag on gcloud sql instances patch instance_name database flags cloudsql_mysql_audit on this command overwrites all database flags previously set to keep those and add new ones include the values for all flags you want set on the instance any flag not specifically included is set to its default value for flags that do not take a value specify the flag name followed by an equals sign rest v1beta4 before using any of the request data make the following replacements project id the project id instance id the instance id http method and url patch https sqladmin googleapis com sql v1beta4 projects project id instances instance id request json body settings databaseflags name cloudsql_mysql_audit value on to send your request expand one of these options curl linux macos or cloud shell note the following command assumes that you have logged in to the gcloud cli with your user account by running gcloud init or gcloud auth login or by using cloud shell which automatically logs you into the gcloud cli you can check the currently active account by running gcloud auth list save the request body in a file named request json and execute the following command curl x patch h authorization bearer gcloud auth print access token h content type application json charset utf 8 d request json https sqladmin googleapis com sql v1beta4 projects project id instances instance id powershell windows note the following command assumes that you have logged in to the gcloud cli with your user account by running gcloud init or gcloud auth login you can check the currently active account by running gcloud auth list save the request body in a file named request json and execute the following command cred gcloud auth print access token headers authorization bearer cred invoke webrequest method patch headers headers contenttype application json charset utf 8 infile request json uri https sqladmin googleapis com sql v1beta4 projects project id instances instance id select object expand content you should receive a json response similar to the following response kind sql operation targetlink https sqladmin googleapis com sql v1beta4 projects project id instances instance id status pending user user example com inserttime 2020 01 21t22 43 37 981z operationtype update name operation id targetid instance id selflink https sqladmin googleapis com sql v1beta4 projects project id operations operation id targetproject project id rest v1 before using any of the request data make the following replacements project id the project id instance id the instance id http method and url patch https sqladmin googleapis com sql v1 projects project id instances instance id request json body settings databaseflags name cloudsql_mysql_audit value on to send your request expand one of these options curl linux macos or cloud shell note the following command assumes that you have logged in to the gcloud cli with your user account by running gcloud init or gcloud auth login or by using cloud shell which automatically logs you into the gcloud cli you can check the currently active account by running gcloud auth list save the request body in a file named request json and execute the following command curl x patch h authorization bearer gcloud auth print access token h content type application json charset utf 8 d request json https sqladmin googleapis com sql v1 projects project id instances instance id powershell windows note the following command assumes that you have logged in to the gcloud cli with your user account by running gcloud init or gcloud auth login you can check the currently active account by running gcloud auth list save the request body in a file named request json and execute the following command cred gcloud auth print access token headers authorization bearer cred invoke webrequest method patch headers headers contenttype application json charset utf 8 infile request json uri https sqladmin googleapis com sql v1 projects project id instances instance id select object expand content you should receive a json response similar to the following response kind sql operation targetlink https sqladmin googleapis com sql v1beta4 projects project id instances instance id status pending user user example com inserttime 2020 01 21t22 43 37 981z operationtype update name operation id targetid instance id selflink https sqladmin googleapis com sql v1beta4 projects project id operations operation id targetproject project id cloud sql for mysql audit plugin settings you can tune the behavior of the cloud sql for mysql audit plugin using the flags below all flags can be altered without restarting the database to understand how to manage the flags see configuring database flags cloudsql_mysql_audit_data_masking_regex a regular expression used for data masking that is compliant with perl compatible regular expressions pcres by default in the output audit log user passwords psw are substituted by a password mask of regex is applied only to statements with a command type specified using cloudsql_mysql_audit_data_masking_cmds when using gcloud you must use a flag file to set values with complex special characters default values for this flag identified s by s password s psw password s s psw s password s for s s s s psw password s psw see the following examples without the cloudsql_mysql_audit_data_masking_regex an audit log entry describing a create user command would appear as follows cmd create_user query create user user1 localhost identified by pw with the default value of cloudsql_mysql_audit_data_masking_regex the same audit log would be changed to cmd create_user query create user user1 localhost identified by if you set cloudsql_mysql_audit_data_masking_regex to psw cloud sql can filter all the query contents cmd create_user query cloudsql_mysql_audit_data_masking_cmds comma separated list of commands that the data masking regex cloudsql_mysql_audit_data_masking_regex is applied to set an empty string to stop filtering when using gcloud you must use a flag file to set a comma separated list the default value includes mysql commands with the following password clause create_user alter_user grant update cloudsql_mysql_audit_max_query_length controls the maximum length of the query to record in the audit log if you don t need to see the details of the query you can use 0 which means the query is not recorded in the audit log this saves storage space for the log resulting in lower cost 1 means no limitation default is 1 cloudsql_mysql_audit_log_write_period the log write period for which the writer thread writes the contents of the buffer to disk after reaching the number of milliseconds you set for this flag option or when the buffer is full if you set this flag option to 0 the user thread is forced to wait for a notification from the writer thread that the write has been completed the default is 500 milliseconds console in the google cloud console go to the cloud sql instances page go to cloud sql instances open the instance and click edit scroll down to the flags section to set a flag that has not been set on the instance before click add flag and choose a database flag from the list above from the drop down menu and set its value click save to save your changes confirm your changes under flags on the overview page gcloud replace the following instance_name the name of the instance you are setting the flag on flag_name the name of the configuration flag flag_value the value to use for the flag gcloud sql instances patch instance_name database flags flag_name flag_value rest v1beta4 before using any of the request data make the following replacements project id the project id instance id the instance id http method and url patch https sqladmin googleapis com sql v1beta4 projects project id instances instance id request json body settings databaseflags name flag_name value flag_value to send your request expand one of these options curl linux macos or cloud shell note the following command assumes that you have logged in to the gcloud cli with your user account by running gcloud init or gcloud auth login or by using cloud shell which automatically logs you into the gcloud cli you can check the currently active account by running gcloud auth list save the request body in a file named request json and execute the following command curl x patch h authorization bearer gcloud auth print access token h content type application json charset utf 8 d request json https sqladmin googleapis com sql v1beta4 projects project id instances instance id powershell windows note the following command assumes that you have logged in to the gcloud cli with your user account by running gcloud init or gcloud auth login you can check the currently active account by running gcloud auth list save the request body in a file named request json and execute the following command cred gcloud auth print access token headers authorization bearer cred invoke webrequest method patch headers headers contenttype application json charset utf 8 infile request json uri https sqladmin googleapis com sql v1beta4 projects project id instances instance id select object expand content you should receive a json response similar to the following response kind sql operation targetlink https sqladmin googleapis com sql v1beta4 projects project id instances instance id status pending user user example com inserttime 2020 01 21t22 43 37 981z operationtype update name operation id targetid instance id selflink https sqladmin googleapis com sql v1beta4 projects project id operations op...