# MariaDB parser

The MariaDB parser can parse the log messages of the MariaDB Audit Plugin. The parser supports the `syslog` output typess’ format. Available in version 3.37 and later.

## Declaration:

Terminal window
```
       @version: 4.26
        @include "scl.conf"
        log {
            source { system(); };
            parser { mariadb-audit-parser(); };
            destination { ... };
        };
```

The `mariadb-audit` is a reusable configuration snippet configured to parse MariaDB Audit Plugin messages. For details on using or writing such configuration snippets, see [Reusing configuration blocks](../../docs/axosyslog-core/4.26/chapter-configuration-file/large-configs/config-blocks/index.md). You can find the source of this configuration snippet on [GitHub](<https://github.com/axoflow/axosyslog/blob/master/scl/mariadb/audit.conf>).

## prefix()

|   
---|---  
Synopsis: | prefix()  
  
_Description:_ Insert a prefix before the name part of the parsed name-value pairs to help further processing. For example:

  * To insert the `my-parsed-data.` prefix, use the `prefix(my-parsed-data.)` option.
  * To refer to a particular data that has a prefix, use the prefix in the name of the macro, for example, `${my-parsed-data.name}`.
  * If you forward the parsed messages using the IETF-syslog protocol, you can insert all the parsed data into the SDATA part of the message using the `prefix(.SDATA.my-parsed-data.)` option.



Names starting with a dot (for example, `.example`) are reserved for use by AxoSyslog. If you use such a macro name as the name of a parsed value, it will attempt to replace the original value of the macro (note that only soft macros can be overwritten, see [Hard versus soft macros](../../docs/axosyslog-core/4.26/chapter-manipulating-messages/customizing-message-format/macros-hard-vs-soft/index.md) for details). To avoid such problems, use a prefix when naming the parsed values, for example, `prefix(my-parsed-data.)`

By default, `mariadb-audit` uses the `.mariadb.` prefix. To modify it, use the following format:

Terminal window
```
       parser {
            mariadb-audit-parser(prefix("myprefix."));
        };
```

## template()

|   
---|---  
Synopsis: | `template("${<macroname>}")`  
  
_Description:_ The macro that contains the part of the message that the parser will process. It can also be a macro created by a previous parser of the log path. By default, the parser processes the entire message (`${MESSAGE}`).

Last modified August 10, 2026: [Adds missing options to some parsers (8cc63220)](<https://github.com/axoflow/axosyslog-core-docs/commit/8cc63220b5da2614f1b8422e6c53949b48b14465>)