MIME-Version: 1.0
References: <CAMon-aRf-XS+wVEnVvP58GtojYENywx+s9pUjwz5omADdLP1NA@mail.gmail.com>
 <CAKAnmmLRzMWc8qsKzu7uYoCVTm2fvME3+DqeeXcT6v1JCjiRPw@mail.gmail.com>
In-Reply-To: <CAKAnmmLRzMWc8qsKzu7uYoCVTm2fvME3+DqeeXcT6v1JCjiRPw@mail.gmail.com>
From: "Colin 't Hart" <colinthart@gmail.com>
Date: Tue, 18 Nov 2025 16:55:06 +0100
Message-ID: <CAMon-aSyCvDk924RuP=BU5B4qsFAwJidWzQKmSEMgfL5KXKodQ@mail.gmail.com>
Subject: Re: Using pgAudit to audit interesting tables for all users except
 for batch user?
To: Greg Sabino Mullane <htamfids@gmail.com>
Cc: PostgreSQL General <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="00000000000097194a0643e07d27"
Archived-At: <https://www.postgresql.org/message-id/CAMon-aSyCvDk924RuP%3DBU5B4qsFAwJidWzQKmSEMgfL5KXKodQ%40mail.gmail.com>
Precedence: bulk

--00000000000097194a0643e07d27
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Duh, I feel silly now :-)

Works perfectly.

Many thanks,

Colin

On Tue, 18 Nov 2025 at 16:11, Greg Sabino Mullane <htamfids@gmail.com>
wrote:

> On Tue, Nov 18, 2025 at 4:18=E2=80=AFAM Colin 't Hart <colinthart@gmail.c=
om>
> wrote:
>
>> alter user <batchuser> set pgaudit.log to 'none';
>>
>
> That's close! pgaudit.log deals with session level things, but you want t=
o
> exclude object-level things. Try:
>
> create role skip_pguadit;
> alter user <batchuser> set pgaudit.role =3D 'skip_pgaudit';
>
>
> Cheers,
> Greg
>
> --
> Crunchy Data - https://www.crunchydata.com
> Enterprise Postgres Software Products & Tech Support
>
>

--00000000000097194a0643e07d27
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Duh, I feel silly now :-)</div><div><br></div><div>Wo=
rks perfectly.</div><div><br></div><div>Many thanks,</div><div><br></div><d=
iv>Colin</div></div><br><div class=3D"gmail_quote gmail_quote_container"><d=
iv dir=3D"ltr" class=3D"gmail_attr">On Tue, 18 Nov 2025 at 16:11, Greg Sabi=
no Mullane &lt;<a href=3D"mailto:htamfids@gmail.com">htamfids@gmail.com</a>=
&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px =
0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div=
 dir=3D"ltr"><div dir=3D"ltr">On Tue, Nov 18, 2025 at 4:18=E2=80=AFAM Colin=
 &#39;t Hart &lt;<a href=3D"mailto:colinthart@gmail.com" target=3D"_blank">=
colinthart@gmail.com</a>&gt; wrote:</div><div class=3D"gmail_quote"><blockq=
uote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1p=
x solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div>alter user=
 &lt;batchuser&gt; set pgaudit.log to &#39;none&#39;;</div></div></blockquo=
te><div><br></div><div>That&#39;s close! pgaudit.log deals with session lev=
el things, but you want to exclude object-level things. Try:</div><div><br>=
</div><div>create role skip_pguadit;</div><div>alter user &lt;batchuser&gt;=
 set pgaudit.role =3D &#39;skip_pgaudit&#39;;</div><div><br></div><div><br>=
</div></div><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr"><di=
v>Cheers,</div><div>Greg</div><div><br></div><div>--</div><div>Crunchy Data=
 - <a href=3D"https://www.crunchydata.com" target=3D"_blank">https://www.cr=
unchydata.com</a></div><div>Enterprise Postgres Software Products &amp; Tec=
h Support</div><div><br></div></div></div></div>
</blockquote></div>

--00000000000097194a0643e07d27--