Consider the Mysql Enterprise Audit plugin. You are checking user accounts and attempt
the following query: Mysql> SELECT user, host, plugin FROM mysql.users; ERROR 1146
(42S02): Table ‘mysql.users’ doesn’t exist Which subset of event attributes would indicate
this error in the audit.log file?
A.
NAME=”Query” STATUS=”1146” SQLTEXT=” Error 1146 (42S02): Table ‘mysql.users’
doesn’t exist”/>
B.
NAME=”Query” STATUS=”1146” SQLTEXT=”select user,host from users”/>
C.
NAME=”Error” STATUS=”0” SQLTEXT=”Error 1146 (42S02): Table ‘mysql.users’ doesn’t
exist”/>
D.
NAME=”Error” STATUS=”1146” SQLTEXT=”Error 1146 (42S02): Table ‘mysql.users’
doesn’t exist”/>
E.
NAME=”Query” STATUS=”1146” SQLTEXT=” Error 1146 (42S02): Table ‘mysql.users’
doesn’t exist”/>
Explanation:
B
The complete Audit_record:
So it is B. (closest match)
<AUDIT_RECORD
NAME=”Query”
RECORD=”8_2016-06-11T19:02:09″
TIMESTAMP=”2016-06-11T20:17:16 UTC”
COMMAND_CLASS=”select”
CONNECTION_ID=”6″
STATUS=”1146″
SQLTEXT=”SELECT user, host, plugin FROM mysql.users”
USER=”root[root] @ localhost []”
HOST=”localhost”
OS_USER=””
IP=””
/>
B