Introduction
Tags beginning with db.snowflake identify events generated by Snowflake.
Valid tags and data tables
The full tag must have 4 levels. The first two are fixed as db.snowflake. The third level identifies the type of events sent, and the fourth level indicates the event subtype.
Technology | Brand | Type | Subtype |
---|---|---|---|
db | snowflake |
|
|
These are the valid tags and corresponding data tables that will receive the parsers' data:
Tag | Data table |
---|---|
db.snowflake.history.access | db.snowflake.history.access |
Table structure
This is the set displayed by these tables.
db.snowflake.history.access
Field | Type | Extra Label |
---|---|---|
eventdate |
| - |
hostname |
| - |
devo_pulling_id |
| - |
query_id |
| - |
query_start_time |
| - |
user_name |
| - |
direct_objects_accessed |
| - |
base_objects_accessed |
| - |
objects_modified |
| - |
hostchain |
| ✓ |
tag |
| ✓ |
rawMessage |
| ✓ |