content_image/825519.jpg content_image/825522.jpg content_image/825526.jpg content_image/825529.jpg
Default Value 

depends on filtering policy 

Whether audit logging is enabled for the current session. The session value of this variable is read only. It is set when the session begins based on the values of the audit_log_include_accounts  and audit_log_exclude_accounts  system variables. The audit log plugin uses the session value to determine whether to audit events for the session. (There is a global value, but the plugin does not use it.) 

• audit_log_encryption 

<img src='content_image/825519.jpg'>

The type of encryption for the audit log file. Permitted values are NONE  (no encryption; the default) and AES  (AES-256-CBC cipher encryption). For more information, see Encrypting Audit Log Files. 

• audit_log_exclude_accounts 

<img src='content_image/825522.jpg'>

<img src='content_image/825526.jpg'>

## Note 

This variable applies only to legacy mode audit log filtering (see Section 6.4.5.9, “Legacy Mode Audit Log Filtering” ). 

The accounts for which events should not be logged. The value should be NULL  or a string containing a list of one or more comma-separated account names. For more information, see Section 6.4.5.7, “Audit Log Filtering” . 

Modifications to audit_log_exclude_accounts  affect only connections created subsequent to the modification, not existing connections. 

• audit_log_file 

<img src='content_image/825529.jpg'>

