首页 > 解决方案 > AWS Aurora 仅在登录失败时将换行记录到错误日志中

问题描述

还有其他人有这个问题吗?

我已启用 Cloudwatch 日志记录并将发布切换为打开以获取常规、审核、慢速和错误日志,但我从未看到登录失败的条目

也许 AWS-RDS 对错误日志的过滤过于激进!

以下示例尝试以虚假用户身份登录并显示不存在的内容(在本例中为 BINLOGS)

这应该为失败的登录生成两个条目。

我实际上得到的只是一堆换行符 (\n),与登录失败的次数成正比。

sh-4.2$  mysql -utoot -pPoot -hMY_INSTANCE_NAME.cum0ld45s8ef.us-east-1.rds.amazonaws.com -e "SHOW BINARY LOGS;"; mysql -utoot -pPoot -hMY_INSTANCE_NAME.cum0ld45s8ef.us-east-1.rds.amazonaws.com -e "SHOW BINARY LOGS;"
ERROR 1045 (28000): Access denied for user 'toot'@'172.31.64.XX' (using password: YES)
ERROR 1045 (28000): Access denied for user 'toot'@'172.31.64.XX' (using password: YES)
sh-4.2$ aws rds download-db-log-file-portion --db-instance-identifier MY_INSTANCE_NAME --no-paginate --log-file-name error/mysql-error-running.log{
    "Marker": "15:106",
    "AdditionalDataPending": false,
    "LogFileData": "\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n"

标签: mysqlamazon-web-serviceserror-loggingamazon-aurora

解决方案


诀窍是将“log_warnings”设置为大于 2 的值,例如 3。在 AWS Aurora 中,这是通过实例参数组配置的


推荐阅读