MySQL Enterprise Audit Setting the runtime value of  audit_log_password_history_keep_days  requires the AUDIT_ADMIN  privilege, in addition to the  SYSTEM_VARIABLES_ADMIN  privilege (or the deprecated SUPER  privilege) normally required to set a global system variable runtime value. This variable applies only to legacy mode audit log filtering (see Section 6.4.5.9, “Legacy Mode Audit Log Filtering” ). The policy controlling how the audit log plugin writes events to its log file. The following table shows the permitted values. audit_log_policy  can be set only at server startup. At runtime, it is a read-only variable. Two other system variables,  audit_log_connection_policy  and  audit_log_statement_policy , provide finer control over logging policy and can be set either at startup or at runtime. If you use audit_log_policy  at startup instead of the other two variables, the server uses its value to set those variables. For more information about the policy variables and their interaction, see Section 6.4.5.5, “Configuring Audit Logging Characteristics” . • audit_log_prune_seconds • audit_log_policy SET GLOBAL audit_log_password_history_keep_days = 0; Note 1537 Command-Line Format --audit-log-policy=value System Variable audit_log_policy Scope Global Dynamic No SET_VAR  Hint Applies No Type Enumeration Default Value ALL Valid Values ALL LOGINS QUERIES NONE Value Description ALL Log all events LOGINS Log only login events QUERIES Log only query events NONE Log nothing (disable the audit stream) Command-Line Format --audit-log-prune-seconds=# Introduced 8.0.24 System Variable audit_log_prune_seconds Scope Global