MySQL Audit Filtering Example: Only Log Successfully Executed INSERT Statements For some Specific Database/Tables Combinations

gistfile1.txt

{
  "filter":
  {
   "id": "main",
   "class":
   {
      "name": "table_access",
      "event":
    {
      "name": [ "insert" ],
      "log": false,
      "filter":
      {
        "activate": { "or": [ { "and": [ { "field": { "name": "table_database.str", "value": "db_1" } },
                                         { "field": { "name": "table_name.str", "value": "table_1" } } ] },
                              { "and": [ { "field": { "name": "table_database.str", "value": "db_2" } },
                                         { "field": { "name": "table_name.str", "value": "table_2" } } ] },
                              { "and": [ { "field": { "name": "table_database.str", "value": "db_3" } },
                                         { "field": { "name": "table_name.str", "value": "table_3" } } ] }
                           ]
                    },
        "class": { "name": "general",
          "event":
           {
             "name": "status",
             "log": { "field": { "name": "general_error_code", "value": 0 } },
             "filter": { "ref": "main" }
           }
        }
      }
    }
   }
  }
}