db.snowflake

Introduction

Tags beginning with db.snowflake identify events generated by Snowflake.

Valid tags and data tables

The full tag must have four levels. The first two are fixed as db.snowflake. The third level identifies the type of events sent, and the fourth level indicates the event subtype.

These are the valid tags and corresponding data tables that will receive the parsers' data:

Product / Service	Tag	Data table
Snowflake	`db.snowflake.history.access`	`db.snowflake.history.access`
	`db.snowflake.history.login`	`db.snowflake.history.login`
	`db.snowflake.history.session`	`db.snowflake.history.session`

For more information, read more about Devo tags.

Table structure

These are the fields displayed in these tables:

db.snowflake.history.access
db.snowflake.history.login
db.snowflake.history.session

db.snowflake.history.access

Field	Type	Extra field
eventdate	`timestamp`
hostname	`str`
devo_pulling_id	`str`
query_id	`str`
query_start_time	`timestamp`
user_name	`str`
direct_objects_accessed	`str`
base_objects_accessed	`str`
objects_modified	`str`
hostchain	`str`	✓
tag	`str`	✓
rawMessage	`str`	✓

Field	Type	Extra field
eventdate	`timestamp`
hostname	`str`
devo_pulling_id	`str`
event_id	`int8`
event_timestamp	`timestamp`
event_type	`str`
user_name	`str`
client_ip	`ip4`
reported_client_type	`str`
reported_client_version	`str`
first_authentication_factor	`str`
second_authentication_factor	`str`
is_success	`str`
error_code	`str`
error_message	`str`
related_event_id	`int4`
connection	`str`
hostchain	`str`	✓
tag	`str`	✓
rawMessage	`str`	✓

db.snowflake.history.session

Field	Type	Extra field
eventdate	`timestamp`
hostname	`str`
devo_pulling_id	`str`
session_id	`int8`
created_on	`timestamp`
user_name	`str`
authentication_method	`str`
login_event_id	`int8`
client_application_version	`str`
client_application_id	`str`
client_environment__application	`str`
client_environment__os	`str`
client_environment__os_version	`str`
client_environment__python_version	`str`
client_environment__python_runtime	`str`
client_environment__python_compiler	`str`
client_environment__tracing	`int4`
client_environment__login_timeout	`int4`
client_environment__network_timeout	`int4`
client_environment__node	`str`
client_environment__v8	`str`
client_environment__uv	`str`
client_environment__zlib	`str`
client_environment__brotli	`str`
client_environment__ares	`str`
client_environment__modules	`str`
client_environment__nghttp2	`str`
client_environment__napi	`str`
client_environment__llhttp	`str`
client_environment__openssl	`str`
client_environment__cldr	`str`
client_environment__icu	`str`
client_environment__tz	`str`
client_environment__unicode	`str`
client_environment__ocsp_mode	`str`
client_build_id	`str`
client_version	`str`
hostchain	`str`	✓
tag	`str`	✓
rawMessage	`str`	✓