When you need to monitor and manage SQL statements executed in database instances, you can use the SQL Explorer and Audit feature to record and analyze the execution status of SQL statements. To use the SQL Explorer and Audit feature, you must enable DAS Enterprise Edition. This topic describes how to enable and use DAS Enterprise Edition.
Overview of DAS Enterprise Edition
In addition to the features provided by DAS Basic Edition, DAS Enterprise Edition provides the SQL Explorer and Audit feature. You can use the SQL Explorer and Audit feature to query information about executed SQL statements, use the information to troubleshoot performance issues, and identify high-risk sources. You can also use the traffic playback and stress testing features to check whether you need to scale up your database instance to handle workloads during peak hours. The following section describes the features of DAS Enterprise Edition:
Search: This feature is used to query and export SQL statements and related information, such as the databases on which the SQL statements are executed, the status of SQL requests, and the execution duration of each SQL statement. For more information, see Search.
SQL Explorer: This feature is used to diagnose the health status of SQL statements, troubleshoot performance issues, and analyze business traffic. For more information, see SQL Explorer.
Security audit: This feature is used to automatically identify risks, such as high-risk SQL statements, SQL injection attacks, and new access sources. For more information, see Security audit.
Traffic playback and stress testing: These features are used to check whether you need to scale up your database instances to handle workloads during peak hours. For more information, see Traffic playback and stress testing.
Supported databases and regions
You can use the SQL Explorer and Audit module only after DAS Enterprise Edition is enabled. The databases and regions that are supported vary with the versions of DAS Enterprise Edition. For more information about the databases and regions that are supported by different versions of DAS Enterprise Edition, see the Supported database types and regions section of the "Editions" topic.
Billing
You can use the SQL Explorer and Audit module only after DAS Enterprise Edition is enabled. For more information about the billing for different versions of DAS Enterprise Edition, see Billing overview.
Enable SQL Explorer and Audit
If you have enabled DAS Enterprise Edition for a database instance, the SQL Explorer and Audit module is automatically enabled for the database instance. You do not need to manually enable this module. For more information, see Enable and manage DAS Cost-efficient Edition and DAS Enterprise Edition.
Log on to the DAS console.
In the left-side navigation pane, click Instance Monitoring.
On the page that appears, find the database instance that you want to manage and click the instance ID. The instance details page appears.
In the left-side navigation pane, choose Request Analysis > SQL Explorer and Audit.
On the SQL Explorer and Audit page, click Enable.
If DAS Enterprise Edition is not purchased within your Alibaba Cloud account, follow the instructions to purchase DAS Enterprise Edition. For more information, see Enable and manage DAS Cost-efficient Edition and DAS Enterprise Edition.
NoteIt takes 10 to 20 minutes to enable the SQL Explorer and Audit module.
Modify the storage duration of data generated by SQL Explorer and Audit
If you reduce the storage duration of data generated by the SQL Explorer and Audit module, DAS immediately clears the SQL audit logs that are stored for a period longer than the specified storage duration. We recommend that you export and save SQL audit logs to your computer before you reduce the storage duration.
Log on to the DAS console.
In the left-side navigation pane, click Instance Monitoring.
On the page that appears, find the database instance that you want to manage and click the instance ID. The instance details page appears.
In the left-side navigation pane, choose Request Analysis > SQL Explorer and Audit.
On the SQL Explorer and Audit page, click the SQL Explorer tab. On this tab, click Service Settings.
In the dialog box that appears, modify the storage duration and click OK.
NoteThe default storage duration of data generated by the SQL Explorer and Audit module is 30 days. The SQL audit logs that are stored for a period longer than the specified storage duration are deleted.
You can also specify the storage duration of data generated by the SQL Explorer and Audit module for your database instance on the DAS Professional Edition Management page. For more information, see Enable and Manage DAS Cost-efficient Edition and DAS Enterprise Edition.
The storage space that is occupied by data generated by the SQL Explorer and Audit module is provided by DAS and does not consume the storage of your database instance.
Disable SQL Explorer and Audit
After you disable the SQL Explorer and Audit module, your business is not affected. However, SQL audit logs are cleared. Before you disable the SQL Explorer and Audit module, we recommend that you export the SQL audit logs as a file and download the file to your computer. If you enable the SQL Explorer and Audit module again, SQL audit logs are generated from the point in time when the SQL Explorer and Audit module is enabled.
Log on to the DAS console.
In the left-side navigation pane, click Instance Monitoring.
On the page that appears, find the database instance that you want to manage and click the instance ID. The instance details page appears.
In the left-side navigation pane, choose Request Analysis > SQL Explorer and Audit.
On the SQL Explorer and Audit page, click the Search tab.
In the Logs section of the Search tab, click Export.
In the dialog box that appears, configure the Exported Fields and Export Time Range parameters, and then click OK.
Download the exported file to your computer and keep the file safe.
The data download feature in the SQL Explorer and Audit module varies with the versions of DAS Enterprise Edition. Download the file based on the actual UI that is displayed.
Click View Exported Logs on the Search tab and download the exported log file.
Download the exported log file on the Task list tab.
Click Service Settings. In the dialog box that appears, turn off the switch and click OK.
The storage space that is occupied by data generated by the SQL Explorer and Audit module is released one hour after the SQL Explorer and Audit module is disabled.
Migrate data generated by SQL Explorer and Audit between different versions of DAS Enterprise Edition
Compared with DAS Enterprise Edition V1 (formerly known as DAS Professional Edition of the previous version), DAS Enterprise Edition V2 (formerly known as DAS Profession Edition of the new version) changes the underlying storage architecture. The hybrid storage of hot and cold data is used to increase performance at lower costs. Based on the hybrid storage of hot and cold data, the billable items for DAS Enterprise Edition V3 are divided by feature. This allows more flexible billing and further reduces costs.
If your database instance supports DAS Enterprise Edition V2 or DAS Enterprise Edition V3, you can migrate data generated by SQL Explorer and Audit from DAS Enterprise Edition of the source version to DAS Enterprise Edition V2 or DAS Enterprise Edition V3 to obtain more favorable prices. For more information, see the How do I migrate data between different versions of DAS Enterprise Edition? section of the "FAQ" topic.
References
Overview of DAS Enterprise Edition
Enable and manage DAS Cost-efficient Edition and DAS Enterprise Edition
Disable DAS Cost-efficient Edition and DAS Enterprise Edition