MySQL Enterprise Audit Arguments: A string that indicates whether the operation succeeded.  OK  indicates success.  ERROR:  message indicates failure. • user_name : The user account name as a string in  user_name @ host_name  format, or  %  to represent the default account. • filter_name : A string that specifies the filter name. Return value: Example: mysql>  SELECT audit_log_filter_set_user(’user1@localhost’, ’SomeFilter’); +------------------------------------------------------------+ | audit_log_filter_set_user(’user1@localhost’, ’SomeFilter’) | +------------------------------------------------------------+ | OK | +------------------------------------------------------------+ • audit_log_read([ arg ]) Reads the audit log and returns a  JSON  string result. If the audit log format is not  JSON , an error occurs. With no argument or a  JSON  hash argument,  audit_log_read()  reads events from the audit log and returns a  JSON  string containing an array of audit events. Items in the hash argument influence how reading occurs, as described later. Each element in the returned array is an event represented as a JSON  hash, with the exception that the last element may be a  JSON null  value to indicate no following events are available to read. With an argument consisting of a  JSON null  value,  audit_log_read()  closes the current read sequence. For additional details about the audit log-reading process, see Section 6.4.5.6, “Reading Audit Log Files” . Arguments: To obtain a bookmark for the most recently written event, call  audit_log_read_bookmark() . arg : The argument is optional. If omitted, the function reads events from the current position. If present, the argument can be a  JSON null  value to close the read sequence, or a  JSON  hash. Within a hash argument, items are optional and control aspects of the read operation such as the position at which to begin reading or how many events to read. The following items are significant (other items are ignored): The  start  item is permitted as of MySQL 8.0.22. 1526 • timestamp ,  id : The position within the audit log of the first event to read. The  timestamp and  id  items together comprise a bookmark that uniquely identify a particular event. If an • start : The position within the audit log of the first event to read. The position is given as a timestamp and the read starts from the first event that occurs on or after the timestamp value. The  start  item has this format, where  value  is a literal timestamp value: "start": { "timestamp": " value " }