Linux MySQL5.7数据库已开启安全审计功能，审计范围已覆盖每个用户，但未对重要用户行为进行审计。开启慢查询日志

Linux MySQL5.7数据库开启慢查询日志。

问题：数据库未对重要用户行为进行审计

整改建议：slow_query_log=1 slow_query_log_file=‘日志保存位置’

方法一、配置文件添加my.cnf

一、查看MySQL数据库是否开启慢查询日志

# 登录 MySQL数据库
mysql -uroot -p

# 查看是否开启慢查询日志
mysql> show variables like '%slow%';
+---------------------------+--------------------------------------------+
| Variable_name             | Value                                      |
+---------------------------+--------------------------------------------+
| log_slow_admin_statements | OFF                                        |
| log_slow_slave_statements | OFF                                        |
| slow_launch_time          | 2                                          |
| slow_query_log            | OFF                                        |
| slow_query_log_file       | /opt/mysql/mydata/mysql/localhost-slow.log |
+---------------------------+--------------------------------------------+
5 rows in set (0.00 sec)

mysql> 

二、开启慢查询日志（my.cnf永久生效）

vim /etc/my.cnf

# 英语

[mysqld]
slow_launch_time=1
slow_query_log=1
slow_query_log_file=/opt/mysql/mydata/mysql/localhost-slow.log 
log_throttle_queries_not_using_indexes=1

# 按ESC 输入:wq 保存退出

三、重启MySQL服务

# 重启MySQL服务
systemctl restart mysqld.service

# 登录数据库
mysql -uroot -p 

# 查看慢查询日志
mysql> show variables like '%slow%';
+---------------------------+--------------------------------------------+
| Variable_name             | Value                                      |
+---------------------------+--------------------------------------------+
| log_slow_admin_statements | OFF                                        |
| log_slow_slave_statements | OFF                                        |
| slow_launch_time          | 1                                          |
| slow_query_log            | ON                                         |
| slow_query_log_file       | /opt/mysql/mydata/mysql/localhost-slow.log |
+---------------------------+--------------------------------------------+
5 rows in set (0.00 sec)

mysql> 

方法二、临时设置生效

一、临时生效（重启服务失效）

# 登录MySQL
mysql -uroot -p

root@localhost ~]# mysql -uroot -p
Enter password: 
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 2
Server version: 5.7.36-log MySQL Community Server (GPL)

Copyright (c) 2000, 2021, Oracle and/or its affiliates.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

# 查看慢查询日志是否开启
mysql> show variables  like '%slow_query_log%';
+---------------------+--------------------------------------------+
| Variable_name       | Value                                      |
+---------------------+--------------------------------------------+
| slow_query_log      | OFF                                        |
| slow_query_log_file | /opt/mysql/mydata/mysql/localhost-slow.log |
+---------------------+--------------------------------------------+
2 rows in set (0.01 sec)

# 临时开启
mysql> set global slow_query_log=1;
Query OK, 0 rows affected (0.01 sec)

# 查看是否开启
mysql> show variables like '%slow_query_log%';
+---------------------+--------------------------------------------+
| Variable_name       | Value                                      |
+---------------------+--------------------------------------------+
| slow_query_log      | ON                                         |
| slow_query_log_file | /opt/mysql/mydata/mysql/localhost-slow.log |
+---------------------+--------------------------------------------+
2 rows in set (0.00 sec)

mysql>