Ansible Role: mysql-mcafee-audit

This Ansible role is used to install and set up the McAfee Audit plugin for MySQL. You can find it here: https://github.com/mcafee/mysql-audit

Requirements

You need to have a MySQL server.

Role Variables

Here are the variables you can use, along with their default values (see defaults/main.yml):

For more details, check: https://github.com/mcafee/mysql-audit/wiki/Configuration

• Plugin Version: Version of the plugin to install.

  • mcafee_plugin_version: "1.1.4-725"

• Configuration Directory: Where the configuration files are located.

  • mysql_config_include_dir: "/etc/mysql/conf.d"

• Audit Log File: Where the audit log file is stored.

  • audit_json_log_file: "/var/log/mysql/audit.log"

• Enable JSON Logging: Turn on the JSON log file.

  • audit_json_file: "ON"

• Force Logging: Record login events (Connect, Quit, and Failed Login) regardless of other settings.

  • audit_force_record_logins: "ON"

• Checksum Validation: Check the mysqld binary checksum.

  • audit_validate_checksum: "OFF"

Dependencies

You need to have MySQL Server installed. We recommend using:

apolloclark.mysql

Example Playbook

Here's a simple playbook to use this role:

- hosts: all
  roles:
    - apolloclark.mysql-mcafee-audit

License

This is licensed under MIT / BSD.

Author Information

This role was created in 2017 by Apollo Clark