MySQL Enterprise Audit depends on filtering policy Default Value Whether audit logging is enabled for the current session. The session value of this variable is read only. It is set when the session begins based on the values of the  audit_log_include_accounts  and audit_log_exclude_accounts  system variables. The audit log plugin uses the session value to determine whether to audit events for the session. (There is a global value, but the plugin does not use it.) • audit_log_encryption Command-Line Format --audit-log-encryption=value System Variable audit_log_encryption Scope Global Dynamic No SET_VAR  Hint Applies No Type Enumeration Default Value NONE Valid Values NONE AES The type of encryption for the audit log file. Permitted values are  NONE  (no encryption; the default) and AES  (AES-256-CBC cipher encryption). For more information, see Encrypting Audit Log Files. • audit_log_exclude_accounts Command-Line Format --audit-log-exclude-accounts=value System Variable audit_log_exclude_accounts Scope Global Dynamic Yes SET_VAR  Hint Applies No Type String Default Value NULL This variable applies only to legacy mode audit log filtering (see Section 6.4.5.9, “Legacy Mode Audit Log Filtering” ). The accounts for which events should not be logged. The value should be  NULL  or a string containing a list of one or more comma-separated account names. For more information, see Section 6.4.5.7, “Audit Log Filtering” . Modifications to  audit_log_exclude_accounts  affect only connections created subsequent to the modification, not existing connections. Note • audit_log_file Command-Line Format --audit-log-file=file_name 1532