In a standard MySQL setup, the logging of user logins/logouts is done by enabling the “general_log” logfile, which forces the MySQL process to log EVERYTHING. This can clearly produce bad performances under heavy load. To avoid such performance restrictions we added a new MySQL Audit Plugin to the Syslog View of NetEye.
In order to mitigate the described performance degradation we packetized a native MySQL plugin, which aims to write a dedicated logfile containing only login/logout and failed login attempts information. This allows you to audit accesses to a MySQL database with a negligible performance impact.