# MariaDB parser

The MariaDB parser can parse the log messages of the MariaDB Audit Plugin. The parser supports the `syslog` output typess’ format. Available in version 3.37 and later.

## Declaration:
```
       @version: 4.24
        @include "scl.conf"
        log {
            source { system(); };
            parser { mariadb-audit-parser(); };
            destination { ... };
        };
    
```

The `mariadb-audit` is a reusable configuration snippet configured to parse MariaDB Audit Plugin messages. For details on using or writing such configuration snippets, see [Reusing configuration blocks](../../docs/axosyslog-core/chapter-configuration-file/large-configs/config-blocks/index.md). You can find the source of this configuration snippet on [GitHub](<https://github.com/axoflow/axosyslog/blob/master/scl/mariadb/audit.conf>).

## prefix()

|   
---|---  
Synopsis: | prefix()  
  
_Description:_ Insert a prefix before the name part of the parsed name-value pairs to help further processing. For example:

  * To insert the `my-parsed-data.` prefix, use the `prefix(my-parsed-data.)` option.
  * To refer to a particular data that has a prefix, use the prefix in the name of the macro, for example, `${my-parsed-data.name}`.
  * If you forward the parsed messages using the IETF-syslog protocol, you can insert all the parsed data into the SDATA part of the message using the `prefix(.SDATA.my-parsed-data.)` option.



Names starting with a dot (for example, `.example`) are reserved for use by AxoSyslog. If you use such a macro name as the name of a parsed value, it will attempt to replace the original value of the macro (note that only soft macros can be overwritten, see [Hard versus soft macros](../../docs/axosyslog-core/chapter-manipulating-messages/customizing-message-format/macros-hard-vs-soft/index.md) for details). To avoid such problems, use a prefix when naming the parsed values, for example, `prefix(my-parsed-data.)`

By default, `mariadb-audit` uses the `.mariadb.` prefix. To modify it, use the following format:
```
 
       parser {
            mariadb-audit-parser(prefix("myprefix."));
        };
    
```

Last modified August 30, 2024: [Delete duplicate chunk (d9f3cf6)](<https://github.com/axoflow/axosyslog-core-docs/commit/d9f3cf6cf4bcc043f7115979327d4d492392b42f>)