configuring-audit-logging

Name: configuring-audit-logging
Availability: InStock
Author: CockroachDB

Configure SQL audit logging on CockroachDB clusters for security events.

3|3|Updated Mar 11, 2026

Search Tags:#security #logging #audit #compliance #rbac #cockroachdb

Ready to run

npx skills add https://github.com/cockroachdb/claude-plugin --skill configuring-audit-logging

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: configuring-audit-logging
Source: https://github.com/cockroachdb/claude-plugin/tree/main/skills/security-and-governance/configuring-audit-logging
Command: npx skills add https://github.com/cockroachdb/claude-plugin --skill configuring-audit-logging

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Configures SQL audit logging on CockroachDB clusters to capture security-relevant events such as authentication attempts, privilege changes, DDL operations, and sensitive data access. Use when enabling audit logging for compliance, setting up role-based audit policies, or verifying audit configuration.

Core Features & Use Cases

Enables admin and role-based audit logging to meet compliance requirements (SOC 2, HIPAA, PCI DSS).
Provides verification, rollback guidance, and targeted auditing for sensitive roles.
Supports log delivery verification and integration with monitoring workflows for security posture.

Quick Start

Configure admin and role-based audit logging on your CockroachDB cluster to begin capturing security events safely.

Frequently Asked Questions about configuring-audit-logging

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I configure audit logging in CockroachDB for SOC 2 or HIPAA compliance?▼

CockroachDB audit logging captures security-relevant events like authentication attempts and privilege changes to meet SOC 2, HIPAA, or PCI DSS requirements. You enable it by modifying cluster settings to activate admin and role-based auditing policies.

What events does role-based audit logging capture in a CockroachDB cluster?▼

Role-based audit logging in CockroachDB captures security-relevant events including authentication attempts, privilege changes, DDL operations, and sensitive data access. Targeted auditing allows you to monitor specific roles handling sensitive data.

How do I verify audit log delivery after enabling logging on a CockroachDB cluster?▼

Verify audit log delivery by checking log outputs after modifying cluster settings and enabling admin or role-based auditing. This ensures security events are properly captured and integrated with your monitoring workflows for security posture.

Can I rollback audit logging configuration changes on a CockroachDB cluster?▼

Yes, you can rollback audit logging configuration changes on a CockroachDB cluster. The process includes rollback guidance to safely revert cluster settings and disable admin or role-based auditing when needed without disrupting production environments.

Does CockroachDB support role-based access controls for audit trails?▼

Yes, CockroachDB supports role-based access controls for audit trails. You can enable role-based auditing to apply targeted policies that capture sensitive data access and DDL operations for specific roles requiring compliance monitoring.