db.snowflake

Introduction

Tags beginning with db.snowflake identify events generated by Snowflake.

Valid tags and data tables

The full tag must have 4 levels. The first two are fixed as db.snowflake. The third level identifies the type of events sent, and the fourth level indicates the event subtype.

Technology	Brand	Type	Subtype
db	snowflake	history	access login sessions

These are the valid tags and corresponding data tables that will receive the parsers' data:

Tag	Data table
db.snowflake.history.access	db.snowflake.history.access
db.snowflake.history.login	db.snowflake.history.login
db.snowflake.history.session	db.snowflake.history.session

Table structure

This is the set displayed by these tables.

db.snowflake.history.access
db.snowflake.history.login
db.snowflake.history.session

db.snowflake.history.access

Field	Type	Extra Label
eventdate	`timestamp`	-
hostname	`str`	-
devo_pulling_id	`str`	-
query_id	`str`	-
query_start_time	`timestamp`	-
user_name	`str`	-
direct_objects_accessed	`str`	-
base_objects_accessed	`str`	-
objects_modified	`str`	-
hostchain	`str`	✓
tag	`str`	✓
rawMessage	`str`	✓

Field	Type	Extra Label
eventdate	`timestamp`	-
hostname	`str`	-
devo_pulling_id	`str`	-
event_id	`int8`	-
event_timestamp	`timestamp`	-
event_type	`str`	-
user_name	`str`	-
client_ip	`ip4`	-
reported_client_type	`str`	-
reported_client_version	`str`	-
first_authentication_factor	`str`	-
second_authentication_factor	`str`	-
is_success	`str`	-
error_code	`str`	-
error_message	`str`	-
related_event_id	`int4`	-
connection	`str`	-
hostchain	`str`	✓
tag	`str`	✓
rawMessage	`str`	✓

db.snowflake.history.session

Field	Type	Extra Label
eventdate	`timestamp`	-
hostname	`str`	-
devo_pulling_id	`str`	-
session_id	`int8`	-
created_on	`timestamp`	-
user_name	`str`	-
authentication_method	`str`	-
login_event_id	`int8`	-
client_application_version	`str`	-
client_application_id	`str`	-
client_environment__application	`str`	-
client_environment__os	`str`	-
client_environment__os_version	`str`	-
client_environment__python_version	`str`	-
client_environment__python_runtime	`str`	-
client_environment__python_compiler	`str`	-
client_environment__tracing	`int4`	-
client_environment__login_timeout	`int4`	-
client_environment__network_timeout	`int4`	-
client_environment__node	`str`	-
client_environment__v8	`str`	-
client_environment__uv	`str`	-
client_environment__zlib	`str`	-
client_environment__brotli	`str`	-
client_environment__ares	`str`	-
client_environment__modules	`str`	-
client_environment__nghttp2	`str`	-
client_environment__napi	`str`	-
client_environment__llhttp	`str`	-
client_environment__openssl	`str`	-
client_environment__cldr	`str`	-
client_environment__icu	`str`	-
client_environment__tz	`str`	-
client_environment__unicode	`str`	-
client_environment__ocsp_mode	`str`	-
client_build_id	`str`	-
client_version	`str`	-
hostchain	`str`	✓
tag	`str`	✓
rawMessage	`str`	✓