Available in VPC
While operating the DB cluster, situations where you need to change the options related to the DB set upon creation may occur. Cloud DB Serverless supports changes of related settings simply through a few clicks, even for clusters that have already been created.
- By default, DB management features are available when the DB cluster status is running.
- The available menus for DB management features differ depending on the DB cluster and DB instance.
To manage DB Cluster that has been created and is in operation:
- In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Database > Cloud DB Serverless.
- Click the DB Cluster menu.
- In the DB cluster list, click the cluster you want to manage, and then click [DB Management].
- Click the necessary management tab on the DB Cluster details menu.
Manage Database
You can add a DB to the selected DB cluster or delete a DB you created. Up to 1,000 DB can be added or viewed, and the addition or deletion tasks can be performed for up to 10 DB at a time.
To perform a DB addition or creation task, click [Add Database] to add database, or click [Delete] in the same row as the created DB to delete the DB.
If you delete a database, all the data in the selected DB will be deleted.
Manage DB Config
Various settings can be changed while the DB cluster is in the Running state. The changed settings are applied to the entire DB Cluster, and some config variables are applied after an automatic restart of the DB Cluster upon the change. To change:
- On the DB Config Management tab, view or enter the required information.
- Config Name: Name of the config variable
- Config Value: Variable value
- Click [Add].
- When editing the added config variable, click [Edit].
- When deleting the added config variable (setting it to default): Click [Delete].
- Click [Save].
- View the status with the modified config from the DB Cluster list.
- Configuring: Status in which the DB Cluster is being configured based on user input data.
- Running: Status in which the DB cluster's configuration has been completed with the information you entered.
- If the set config values are not appropriate, then the DB cluster may not operate properly. Make sure to fully understand the action of the config variable before applying the settings. If a problem occurs in the DB cluster operation due to incorrect settings, contact the customer center.
- If logs (binary, error, slow, general log) are set to be collected through manage DB Config, they are stored in the data storage area of the DB cluster, and fees will occur according to the usage.
Config variable list
The following are descriptions of config variables:
- For more information on setting config variables, see MySQL official documentation (English).
- Some Config variables are internally managed by Cloud DB Serverless and cannot be modified directly.
Manage DB user
When creating a DB cluster, the ID and password for the account to access are created by default. However, while operating the DB cluster, you may need to add users or reset the passwords of existing user accounts. You may also need to delete user accounts. Cloud DB Serverless provides an DB User management feature that enables you to conveniently add, edit, and delete user accounts that use the DB cluster. The results of the user account change through the DB User management feature are applied to the entire DB Service. Up to 1,000 user accounts can be added.
To add or delete user accounts or change the password of the existing admin account:
-
On the Manage DB User tab, perform the required tasks for the user account.
- Add user account: Enter the information for USER_ID, DB permissions, and password, and then click [Add DB User]
- All DB permissions include the execute permission of the system DB.
- The CRUD permission includes the READ permission, and the DDL permission includes the READ and CRUD permissions.
- View procedure can be performed by any account regardless of permissions. For more information, see Official MySQL document (English).
- Delete user account: Click [Delete] in the same row as the user account to be deleted.
- Edit user account password: Click [Edit] in the same row as the user account to be edited, and click [Save] after editing.
- Add user account: Enter the information for USER_ID, DB permissions, and password, and then click [Add DB User]
-
Click [Save].
-
Check the status of a DB cluster for which you've set users from the list in the DB cluster interface.
- Configuring: Status in which the DB Cluster is being configured based on user input data.
- Running: Status in which the DB cluster's configuration has been completed with the information you entered.
- If you delete a user account, applications that use the deleted account will no longer be able to access the service.
- If creating a DB user with characters not permitted on the console, it cannot be edited or deleted. Directly access the DB cluster to make a change.
Manage Audit settings
You can make a log file that records connection activity and query execution history within a DB cluster for auditing purposes. Audit settings management: You can configure whether to enable Audit Logs, the scope of events to record, and the log format. Any changes you make are applied to the entire DB cluster. To change:
- On the Manage Audit settings tab, see the following to change the settings:
- Audit Log usage: Select whether to enable Audit Logs (default: Disabled).
- Audit Policy: Define the events to be recorded in the Audit Log (default: ALL).
- LOGINS: Records only the login and logout of DB accounts accessing the DB.
- QUERIES: Logs queries, including DDL statements, executed in the DB.
- ALL: LOGINS + QUERIES
- Log Format: Select the format used to record Audit Log files (JSON or XML, default: JSON).
- Click [Save].
- If a restart notification popup appears, review the information and click [OK].
- In the DB Cluster interface, check the Status of the target for which Audit is configured.
- Configuring: Status in which the DB Cluster is being configured based on user input data.
- Running: Status in which the DB cluster's configuration has been completed with the information you entered.
| Change | Restart | Description |
|---|---|---|
| Enable Audit Logs | Required | Applied after all DB instances in the DB cluster are restarted. |
| Change Log Format | Required | Applied after restart when the Log Format is changed while Audit Logs are enabled. |
| Change Audit Policy | Not required | Applied immediately when only the Audit Policy is changed while Audit Logs are enabled. |
| Deactivate Audit Log | Not required | Applied immediately. Existing Audit Log files are retained and not deleted. |
The information recorded in the Audit Log is the same, but the field names and structure differ depending on the Log Format (JSON or XML).
-
JSON: Recorded as an array of records. Each record consists of common fields and an event-specific data object.
-
XML: Recorded as child elements of
<AUDIT_RECORD>, and all items use uppercase element names.- Field mapping table
| Item | JSON | XML |
|---|---|---|
| Event timestamp (UTC+0) | timestamp | TIMESTAMP |
| Record ID | id | RECORD_ID
|
| Event type | class + event | NAME |
| Action type | query_data.sql_command | COMMAND_CLASS |
| Client connection ID | connection_id | CONNECTION_ID |
| Connection account | account.user | USER |
| Authenticated account | Included in account.user | PRIV_USER |
| Connection host | account.host | HOST |
| Client IP address | login.ip | IP |
| External authenticated user | login.os | OS_LOGIN |
| Proxy user | login.proxy | PROXY_USER |
| Default database at connection time | connection_data.db | DB |
| Accessed table | table_access_data.table | TABLE |
| Status result value (0: Success) | connection_data.status general_data.status command_data.status query_data.status |
STATUS |
| Connection type | connection_data.connection_type | CONNECTION_TYPE |
| SQL statement performed | query_data.query parse_data.query |
SQLTEXT |
| Rewritten SQL statement | parse_data.rewritten_query | REWRITTEN_QUERY |
| Parsing flags | parse_data.flags | FLAGS |
| Command type executed | command_data.command | COMMAND_CLASS |
| Queried variable name/value | global_variable_data.name global_variable_data.value |
VARIABLE_NAME VARIABLE_VALUE |
| Client information | connection_attributes | CONNECTION_ATTRIBUTES
|
| Server ID | server_id | SERVER_ID |
Client information (connection_attributes) records _pid, _platform, _os, _client_name, _client_version,
program_name, os_user, etc. Items may vary depending on the connector used for connection.
* Event type mapping table
| Description | JSON (class/event) | XML (NAME) |
|---|---|---|
| Connection | connection/connect | Connect |
| Disconnection | connection/disconnect | Disconnect |
| Query start | query/query_start | Query Start |
| Query end | query/query_status_end | Query Status End |
| Command start | command/command_start | Command Start |
| Command end | command/command_end | Command End |
| Query rewrite | parse/query_rewritten | Query Rewritten |
| Prepared statement | parse/prepared_statement | Prepared Statement |
| View table | table_access/read | TableRead |
| Table input | table_access/insert | TableInsert |
| View variable | global_variable/variable_get | Variable Get |
| General status | general/status | Status |
| General result | general/result | Result |
| Error | general/error | Error |
* Record example
JSON
{
"timestamp": "2026-07-31 17:23:37",
"id": 62,
"class": "connection",
"event": "connect",
"connection_id": 10,
"account": { "user": "app_user", "host": "" },
"login": { "user": "app_user", "os": "", "ip": "127.0.0.1", "proxy": "" },
"connection_data": { "connection_type": "tcp/ip", "status": 0, "db": "fmtdb" }
}
XML
<AUDIT_RECORD>
<NAME>Connect</NAME>
<RECORD_ID>5_2026-07-31T17:23:37</RECORD_ID>
<TIMESTAMP>2026-07-31T17:23:37</TIMESTAMP>
<COMMAND_CLASS>Connection</COMMAND_CLASS>
<CONNECTION_ID>10</CONNECTION_ID>
<HOST>localhost</HOST>
<IP>127.0.0.1</IP>
<USER>app_user</USER>
<OS_LOGIN></OS_LOGIN>
<PRIV_USER>app_user</PRIV_USER>
<PROXY_USER></PROXY_USER>
<DB>fmtdb</DB>
<STATUS>0</STATUS>
<CONNECTION_TYPE>TCP/IP</CONNECTION_TYPE>
</AUDIT_RECORD>
If a login attempt fails, the error number is recorded in the status result value of the connection event (JSON
connection/connect, XMLConnect).
For example, if the password is incorrect,1045is recorded.
- When Audit Logs are enabled or the Log Format is changed, all DB instances in the DB cluster are restarted. During the restart, DB connections may be interrupted, and write operations cannot be performed while the primary is restarting. However, failover does not occur.
- If the Audit Policy is set to ALL or QUERIES, all executed queries are recorded, which may significantly increase the volume of generated logs.
- Audit Logs use both DB cluster data storage and the Cloud Log Analytics service, which may incur additional charges based on storage usage.
- When the Log Format is changed, the recorded information remains the same, but the field names and structure change. To integrate a system that collects and analyzes Audit Logs, be sure to update the parsing rules when changing the Log Format.
- When Audit Logs are disabled, Audit Policy and Log Format cannot be selected.
- Audit Log rotation and retention settings can be changed on the DB Log Settings Management tab in the same way as other logs.
- Collected Audit Logs are stored as files in the same manner as other DB logs. The list of log files can be viewed in [DB management] > DB Instance details > DB Instance Logs, and contents of the logs can be viewed in Monitoring > DB Logs.
- The active Audit Log file is stored as
mysql-audit.log, and rotated files are stored in themysql-audit.<로테이션 시각>.logformat. - Activities performed by management accounts used by NAVER Cloud Platform for DB cluster operations and high availability are excluded from Audit Log recording.
DB Log setting management
You can change the log rotation and storage settings for the DB cluster you created. Changed settings are applied to the entire DB Cluster. To change:
- On the Manage DB Log settings tab, see the following to change the settings:
- Log: Check log name (select from Error Log, Slow Query Log, or General Log).
- Log rotate: Set the log rotation to be performed daily or by size
- When selecting by size, choose between 10 MB and 100 MB
- Log file: Number of log files to be stored (select between 3 and 7)
- Click [Save].
- In the DB Cluster interface, check the Status of the target with Log enabled in the DB cluster list.
- Configuring: Status in which the DB Cluster is being configured based on user input data.
- Running: Status in which the DB cluster's configuration has been completed with the information you entered.
- General query log is loaded only when
general_logis enabled from DB management > DB Cluster details > Manage DB Config. - Audit Log rotation and retention settings can be changed only when Audit Log is enabled in DB management > DB Cluster details > Manage Audit settings.
- Previous logs cannot be automatically deleted when changing the log rotate type. Delete unnecessary logs using [DB management] > DB Instance details > DB Instance Logs > [Delete Log].
Manage Backup settings
You can change the backup file retention period and backup time for the selected DB cluster. To change:
- On the Manage Backup settings tab, see the following to change the settings:
- Backup settings: Select whether to use the backup settings of Cloud DB Serverless (currently the option cannot be changed).
- Backup file retention period: Enter a value between 1 and 30.
- Backup time: Configuring backup time is performed within 15 minutes from the selected time.
- Automatic: Backup is automatically started every day.
- User-defined: Backup is started every day within +15 minutes from the time you selected.
- Click [Save].