dbfwfilter logging of rejected SQL?
The qlafilter allows me to log all or selected SQL, and the dbfwfilter allows me to reject SQL that matches various criteria. I'd like to have any SQL that is rejected by dbfwfilter to be written to a special log (or email, or?) so that we have notification of a potential attack, in order to closely examine it. This would be more efficient than trying to scan a full log of all SQL.
Is it possible somehow to log the dbfwfilter rejections?
Answer Answered by Markus Mäkelä in this comment.
The log_match and log_no_match parameters should allow you to do that. Refer to the mariadb-maxscale-21-database-firewall-filter document for further details.
Content reproduced on this site is the property of its respective owners,
and this content is not reviewed in advance by MariaDB. The views, information and opinions
expressed by this content do not necessarily represent those of MariaDB or any other party.
