Databases Audit Events
This page lists audit events related to Teleport-protected databases.
db.create
Database Created
Example:
{
"cluster_name": "root",
"code": "TDB03I",
"db_labels": {
"env": "local",
"teleport.dev/origin": "dynamic"
},
"db_protocol": "postgres",
"db_uri": "localhost:5432",
"ei": 0,
"event": "db.create",
"expires": "0001-01-01T00:00:00Z",
"name": "postgres-local",
"time": "2021-10-08T15:42:15.39Z",
"uid": "9d37514f-aef5-426f-9fda-31fd35d070f5",
"user": "05ff66c9-a948-42f4-af0e-a1b6ba62561e.root"
}
db.delete
Database Deleted
Example:
{
"cluster_name": "root",
"code": "TDB05I",
"ei": 0,
"event": "db.delete",
"expires": "0001-01-01T00:00:00Z",
"name": "postgres-local",
"time": "2021-10-08T15:42:36.005Z",
"uid": "74f5e6b9-50c4-4195-bb26-d615641255bc",
"user": "05ff66c9-a948-42f4-af0e-a1b6ba62561e.root"
}
db.session.cassandra.batch
Cassandra Batch
Example:
{
"ei": 0,
"event": "db.session.cassandra.batch",
"code": "TCA01I",
"time": "2022-06-02T08:46:33.825Z",
"cluster_name": "im-a-cluster-name",
"user": "alice",
"sid": "a724c7e8-8e00-45a6-afac-82023d0f86b6",
"db_service": "cassandra",
"db_protocol": "cassandra",
"db_uri": "localhost:65054",
"db_user": "cassandra",
"consistency": "ConsistencyLevel QUORUM [0x0004]",
"batch_type": "BatchType LOGGED [0x00]",
"children": [
{
"query": "INSERT INTO batch_table (id) VALUES 1"
},
{
"query": "INSERT INTO batch_table (id) VALUES 2"
}
]
}
db.session.cassandra.execute
Cassandra Execute
Example:
{
"ei": 0,
"event": "db.session.cassandra.execute",
"code": "TCA03I",
"time": "2022-06-02T08:46:33.825Z",
"cluster_name": "im-a-cluster-name",
"user": "alice",
"sid": "2126ee07-cfe1-4213-8032-70b3e6e1ac79",
"db_service": "cassandra",
"db_protocol": "cassandra",
"db_uri": "localhost:65054",
"db_user": "cassandra",
"query_id": "d34e638934721c3bcd69933f992a00cb"
}
db.session.cassandra.prepare
Cassandra Prepare Event
Example:
{
"ei": 0,
"event": "db.session.cassandra.prepare",
"code": "TCA02I",
"time": "2022-06-02T08:46:33.825Z",
"cluster_name": "im-a-cluster-name",
"user": "alice",
"sid": "2126ee07-cfe1-4213-8032-70b3e6e1ac79",
"db_service": "cassandra",
"db_protocol": "cassandra",
"db_uri": "localhost:65054",
"db_user": "cassandra",
"query": "SELECT * FROM system_schema.keyspaces"
}
db.session.cassandra.register
Cassandra Register
Example:
{
"ei": 0,
"event": "db.session.cassandra.register",
"code": "TCA04I",
"time": "2022-06-02T08:46:33.825Z",
"cluster_name": "im-a-cluster-name",
"user": "alice",
"sid": "2126ee07-cfe1-4213-8032-70b3e6e1ac79",
"db_service": "cassandra",
"db_protocol": "cassandra",
"db_uri": "localhost:65054",
"db_user": "cassandra",
"event_types": [
"TOPOLOGY_CHANGE",
"STATUS_CHANGE",
"SCHEMA_CHANGE"
]
}
db.session.dynamodb.request
There are multiple events with the db.session.dynamodb.request type.
TDY01I
DynamoDB Request
Example:
{
"cluster_name": "root.com",
"code": "TDY01I",
"event": "db.session.dynamodb.request",
"db_name": "",
"db_protocol": "dynamodb",
"db_service": "ddb1",
"db_user": "DynamoDBRole",
"ei": 1,
"uri": "dynamodb.us-west-2.amazonaws.com",
"body": {
"TableName": "test-table"
},
"method": "POST",
"path": "",
"raw_query": "",
"status_code": 200,
"target": "DynamoDB_20120810.Scan",
"time": "2022-12-23T19:14:07.763Z",
"uid": "12345678-46e9-4110-a773-2c88278d08ca",
"user": "[email protected]"
}
TDY01E
DynamoDB Request Failed
Example:
{
"cluster_name": "root.com",
"code": "TDY01E",
"event": "db.session.dynamodb.request",
"db_name": "",
"db_protocol": "dynamodb",
"db_service": "ddb1",
"db_user": "DynamoDBRole",
"ei": 1,
"uri": "dynamodb.us-west-2.amazonaws.com",
"body": {
"TableName": "test-table"
},
"method": "POST",
"path": "",
"raw_query": "",
"status_code": 0,
"target": "DynamoDB_20120810.Scan",
"time": "2022-12-23T19:04:07.763Z",
"uid": "12345678-46e9-4110-a773-2c88278d08ca",
"user": "[email protected]"
}
db.session.elasticsearch.request
There are multiple events with the db.session.elasticsearch.request type.
TES00I
Elasticsearch Request
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TES00I",
"body": null,
"category": 0,
"db_protocol": "elasticsearch",
"db_service": "myelastic",
"db_uri": "localhost:9201",
"db_user": "elasticuser",
"ei": 101,
"event": "db.session.elasticsearch.request",
"headers": {
"Accept": [
"*/*"
],
"User-Agent": [
"curl/7.79.1"
]
},
"method": "GET",
"path": "/",
"query": "",
"raw_query": "",
"sid": "b739c817-bc11-4eaa-b256-c6646d7fcc21",
"target": "",
"time": "2022-09-27T11:43:58.433Z",
"uid": "730a8de0-79a9-486f-b9c6-3820c3a6977c",
"user": "alice"
}
TES00E
Elasticsearch Request Failed
Example:
{
"code": "TES00E",
"event": "db.session.elasticsearch.request",
"time": "2020-06-05T16:24:05Z",
"uid": "68a83a99-73ce-4bd7-bbf7-99103c2ba6a0"
}
db.session.end
Database Session Ended
Example:
{
"cluster_name": "root",
"code": "TDB01I",
"db_name": "",
"db_protocol": "mongodb",
"db_service": "mongo-primary",
"db_uri": "mongodb://mongo-1:27017,mongo-2:27018/?replicaSet=rs0",
"db_user": "alice",
"ei": 16,
"event": "db.session.end",
"sid": "13c04d4b-2e94-4106-a3a1-5ab8aae10465",
"time": "2021-07-14T07:06:25.608Z",
"uid": "0a2387cd-3fa2-4424-9c14-e33af17e4ab1",
"user": "[email protected]"
}
db.session.malformed_packet
Database Malformed Packet
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TDB06I",
"db_name": "master",
"db_protocol": "sqlserver",
"db_service": "sqlserver02",
"db_uri": "localhost:1433",
"db_user": "sqlserver",
"ei": 50,
"event": "db.session.malformed_packet",
"payload": "AwEAkAAAAgByAGEAbQBfADEAIABuAHYAYQByAGMAaABhAHIAKAA0ADAAMAAwACkAC0AAXwBtAHMAcABhAHIAYQBtAF8AMAAA50AfCQTQADQWAHMAcAB0AF8AbQBvAG4AaQB0AG8AcgALQABfAG0AcwBwAGEAcgBhAG0AXwAxAADnQB8JBNAANAYAZABiAG8A",
"sid": "3ed38c42-eef0-419b-b893-f2f10990f117",
"time": "2022-06-02T08:46:33.825Z",
"uid": "503e310d-8d88-4bea-bbbb-a1b35456a03a",
"user": "alice"
}
db.session.mysql.create_db
MySQL Create Database
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY08I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"event": "db.session.mysql.create_db",
"schema_name": "another_database",
"time": "2022-04-13T20:00:09.000Z",
"user": "[email protected]"
}
db.session.mysql.debug
MySQL Debug
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY12I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"event": "db.session.mysql.debug",
"time": "2022-04-13T20:00:05.000Z",
"user": "[email protected]"
}
db.session.mysql.drop_db
MySQL Drop Database
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY09I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"event": "db.session.mysql.drop_db",
"schema_name": "another_database",
"time": "2022-04-13T20:00:08.000Z",
"user": "[email protected]"
}
db.session.mysql.init_db
MySQL Change Database
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY07I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"event": "db.session.mysql.init_db",
"schema_name": "another_database",
"time": "2022-04-13T20:00:10.000Z",
"user": "[email protected]"
}
db.session.mysql.process_kill
MySQL Kill Process
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY11I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"event": "db.session.mysql.process_kill",
"process_id": 60,
"time": "2022-04-13T20:00:06.000Z",
"user": "[email protected]"
}
db.session.mysql.refresh
MySQL Refresh
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY13I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"event": "db.session.mysql.refresh",
"subcommand": "REFRESH_THREADS",
"time": "2022-04-13T20:00:04.000Z",
"user": "[email protected]"
}
db.session.mysql.shut_down
MySQL Shut Down
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY10I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"event": "db.session.mysql.shut_down",
"time": "2022-04-13T20:00:07.000Z",
"user": "[email protected]"
}
db.session.mysql.statements.bulk_execute
MySQL Statement Bulk Execute
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY06I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"ei": 0,
"event": "db.session.mysql.statements.bulk_execute",
"parameters": null,
"statement_id": 1,
"time": "2022-02-10T20:57:53.000Z",
"user": "[email protected]"
}
db.session.mysql.statements.close
MySQL Statement Close
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY03I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"ei": 0,
"event": "db.session.mysql.statements.close",
"statement_id": 1,
"time": "2022-02-10T20:57:56.000Z",
"user": "[email protected]"
}
db.session.mysql.statements.execute
MySQL Statement Execute
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY01I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"ei": 0,
"event": "db.session.mysql.statements.execute",
"parameters": null,
"statement_id": 1,
"time": "2022-02-10T20:57:54.000Z",
"user": "[email protected]"
}
db.session.mysql.statements.fetch
MySQL Statement Fetch
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY05I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"ei": 0,
"event": "db.session.mysql.statements.fetch",
"rows_count": 5,
"statement_id": 1,
"time": "2022-02-10T20:57:55.000Z",
"uid": "0a2bd129-7c2f-4e68-9c84-a17dc4415444",
"user": "[email protected]"
}
db.session.mysql.statements.prepare
MySQL Statement Prepare
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY00I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"ei": 0,
"event": "db.session.mysql.statements.prepare",
"query": "UPDATE `test`.`user` SET `age` = '7' WHERE (`name` = 'alice')",
"time": "2022-02-10T20:57:50.000Z",
"user": "[email protected]"
}
db.session.mysql.statements.reset
MySQL Statement Reset
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY04I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"ei": 0,
"event": "db.session.mysql.statements.reset",
"statement_id": 1,
"time": "2022-02-10T20:57:52.000Z",
"uid": "0a2bd129-7c2f-4e68-9c84-a17dc4415444",
"user": "[email protected]"
}
db.session.mysql.statements.send_long_data
MySQL Statement Send Long Data
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMY02I",
"db_name": "test",
"db_protocol": "mysql",
"db_service": "self-hosted-mysql",
"db_uri": "localhost:3306",
"db_user": "alice",
"ei": 0,
"event": "db.session.mysql.statements.send_long_data",
"statement_id": 1,
"parameter_id": 2,
"data_size": 32,
"time": "2022-02-10T20:57:51.000Z",
"user": "[email protected]"
}
db.session.opensearch.request
There are multiple events with the db.session.opensearch.request type.
TOS00I
OpenSearch Request
Example:
{
"category": 2,
"cluster_name": "im-a-cluster-name",
"code": "TOS00I",
"db_protocol": "opensearch",
"db_service": "opensearch-aws",
"db_uri": "opensearch-aws-aaa111.eu-central-1.es.amazonaws.com:443",
"db_user": "arn:aws:iam::1234567890:role/teleport-db-role",
"ei": 1,
"event": "db.session.opensearch.request",
"headers": {
"Accept-Encoding": [
"gzip"
],
"Content-Type": [
"application/json"
],
"User-Agent": [
"Go-http-client/1.1"
]
},
"method": "GET",
"path": "/_count",
"query": "",
"raw_query": "",
"sid": "370e5d86-84a6-4995-8476-dbea80f9eacf",
"status_code": 200,
"target": "",
"time": "2023-03-11T11:08:29.954Z",
"uid": "d15f795c-1f63-4076-bdd4-ffe88cde716e",
"user": "[email protected]"
}
TOS00E
OpenSearch Request Failed
Example:
{
"category": 2,
"cluster_name": "im-a-cluster-name",
"code": "TOS00E",
"db_protocol": "opensearch",
"db_service": "opensearch-aws",
"db_uri": "opensearch-aws-aaa111.eu-central-1.es.amazonaws.com:443",
"db_user": "arn:aws:iam::1234567890:role/does-not-exist",
"ei": 1,
"event": "db.session.opensearch.request",
"headers": {
"Accept-Encoding": [
"gzip"
],
"Content-Type": [
"application/json"
],
"User-Agent": [
"Go-http-client/1.1"
]
},
"method": "GET",
"path": "/_count",
"query": "",
"raw_query": "",
"sid": "2d9a43c1-14ab-40fa-88db-195312f3401c",
"status_code": 0,
"target": "",
"time": "2023-03-11T11:08:29.954Z",
"uid": "01ad9a74-c8d6-497f-83db-e1c0be83d8da",
"user": "[email protected]"
}
db.session.permissions.update
Database User Permissions Updated
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TDB07I",
"db_name": "master",
"db_protocol": "postgres",
"db_service": "postgres-local",
"db_uri": "localhost:1433",
"db_user": "alice",
"ei": 50,
"event": "db.session.permissions.update",
"sid": "3ed38c42-eef0-419b-b893-f2f10990f117",
"time": "2022-06-02T08:46:33.825Z",
"uid": "503e310d-8d88-4bea-bbbb-a1b35456a03a",
"user": "alice",
"permission_summary": [
{
"counts": {
"table": 1,
"view": 2
},
"permission": "INSERT"
},
{
"counts": {
"table": 2,
"view": 4
},
"permission": "SELECT"
},
{
"counts": {
"table": 3
},
"permission": "UPDATE"
}
]
}
db.session.postgres.function
PostgreSQL Function Call
Example:
{
"cluster_name": "root",
"code": "TPG04I",
"db_name": "test",
"db_protocol": "postgres",
"db_service": "local",
"db_uri": "localhost:5432",
"db_user": "postgres",
"ei": 23,
"event": "db.session.postgres.function",
"sid": "5e0c50cc-4ee7-4110-8d6e-735bf1f06f1f",
"function_oid": "123",
"function_args": [
"qweqweqwe"
],
"time": "2021-12-16T00:40:37.073Z",
"uid": "295c88fc-4725-4de0-9049-64040fc69ec7",
"user": "alice"
}
db.session.postgres.statements.bind
PostgreSQL Statement Bind
Example:
{
"cluster_name": "root",
"code": "TPG01I",
"db_name": "test",
"db_protocol": "postgres",
"db_service": "local",
"db_uri": "localhost:5432",
"db_user": "postgres",
"ei": 20,
"event": "db.session.postgres.statements.bind",
"parameters": [
"qweqweqwe"
],
"portal_name": "",
"sid": "5e0c50cc-4ee7-4110-8d6e-735bf1f06f1f",
"statement_name": "test-ps",
"time": "2021-12-16T00:40:37.071Z",
"uid": "d5bed7e5-6a15-441b-b8ee-a2abd73f3136",
"user": "alice"
}
db.session.postgres.statements.close
PostgreSQL Statement Close
Example:
{
"cluster_name": "root",
"code": "TPG03I",
"db_name": "test",
"db_protocol": "postgres",
"db_service": "local",
"db_uri": "localhost:5432",
"db_user": "postgres",
"ei": 22,
"event": "db.session.postgres.statements.close",
"portal_name": "",
"sid": "5e0c50cc-4ee7-4110-8d6e-735bf1f06f1f",
"statement_name": "test-ps",
"time": "2021-12-16T00:40:37.073Z",
"uid": "295c88fc-4725-4de0-9049-64040fc69ec7",
"user": "alice"
}
db.session.postgres.statements.execute
PostgreSQL Statement Execute
Example:
{
"cluster_name": "root",
"code": "TPG02I",
"db_name": "test",
"db_protocol": "postgres",
"db_service": "local",
"db_uri": "localhost:5432",
"db_user": "postgres",
"ei": 21,
"event": "db.session.postgres.statements.execute",
"portal_name": "",
"sid": "5e0c50cc-4ee7-4110-8d6e-735bf1f06f1f",
"time": "2021-12-16T00:40:37.071Z",
"uid": "a0f045a2-45a4-4a4d-b14a-5f986c1818ff",
"user": "alice"
}
db.session.postgres.statements.parse
PostgreSQL Statement Parse
Example:
{
"cluster_name": "root",
"code": "TPG00I",
"db_name": "test",
"db_protocol": "postgres",
"db_service": "local",
"db_uri": "localhost:5432",
"db_user": "postgres",
"ei": 19,
"event": "db.session.postgres.statements.parse",
"query": "select id from test where id = $1::varchar",
"sid": "5e0c50cc-4ee7-4110-8d6e-735bf1f06f1f",
"statement_name": "test-ps",
"time": "2021-12-16T00:40:37.069Z",
"uid": "06781ebf-6c5b-463b-ad32-e7395afd4a59",
"user": "alice"
}
db.session.query
Database Query
Example:
{
"cluster_name": "root",
"code": "TDB02I",
"db_name": "test",
"db_protocol": "mongodb",
"db_query": "{\"find\": \"test\",\"filter\": {},\"lsid\": {\"id\": {\"$binary\":{\"base64\":\"2KMk23/TTCKUtiAVU0fbgg==\",\"subType\":\"04\"}}},\"$clusterTime\": {\"clusterTime\": {\"$timestamp\":{\"t\":\"1626246087\",\"i\":\"1\"}},\"signature\": {\"hash\": {\"$binary\":{\"base64\":\"8X7BlnDAUxKgUo5lpI3XoKoNF54=\",\"subType\":\"00\"}},\"keyId\": {\"$numberLong\":\"6969719000615878659\"}}},\"$db\": \"test\"}",
"db_service": "mongo-primary",
"db_uri": "mongodb://mongo-1:27017,mongo-2:27018/?replicaSet=rs0",
"db_user": "alice",
"ei": 11,
"event": "db.session.query",
"sid": "13c04d4b-2e94-4106-a3a1-5ab8aae10465",
"success": true,
"time": "2021-07-14T07:03:49.783Z",
"uid": "c4550623-0538-452d-912b-1242715666c4",
"user": "[email protected]"
}
db.session.query.failed
Database Query Failed
Example:
{
"cluster_name": "root",
"code": "TDB02W",
"db_name": "houston",
"db_protocol": "mongodb",
"db_query": "{\"find\": \"test\",\"filter\": {},\"lsid\": {\"id\": {\"$binary\":{\"base64\":\"2KMk23/TTCKUtiAVU0fbgg==\",\"subType\":\"04\"}}},\"$clusterTime\": {\"clusterTime\": {\"$timestamp\":{\"t\":\"1626246227\",\"i\":\"1\"}},\"signature\": {\"hash\": {\"$binary\":{\"base64\":\"zBJKAl6VcjwQrr05N0O4qrQ92PY=\",\"subType\":\"00\"}},\"keyId\": {\"$numberLong\":\"6969719000615878659\"}}},\"$db\": \"houston\"}",
"db_service": "mongo-primary",
"db_uri": "mongodb://mongo-1:27017,mongo-2:27018/?replicaSet=rs0",
"db_user": "alice",
"ei": 13,
"error": "access to database denied",
"event": "db.session.query.failed",
"message": "access to database denied",
"sid": "13c04d4b-2e94-4106-a3a1-5ab8aae10465",
"success": false,
"time": "2021-07-14T07:05:22.32Z",
"uid": "21796ef9-a5dc-4595-a833-b893ac620488",
"user": "[email protected]"
}
db.session.spanner.rpc
There are multiple events with the db.session.spanner.rpc type.
TSPN001W
Spanner RPC Denied
Example:
{
"args": {
"database": "projects/project-id/instances/instance-id/databases/prod-db",
"session_count": 100,
"session_template": {}
},
"cluster_name": "root",
"code": "TSPN001W",
"db_name": "prod-db",
"db_origin": "dynamic",
"db_protocol": "spanner",
"db_service": "teleport-spanner",
"db_type": "spanner",
"db_uri": "spanner.googleapis.com:443",
"db_user": "some-user",
"error": "access to db denied. User does not have permissions. Confirm database user and name.",
"event": "db.session.spanner.rpc",
"message": "access to db denied. User does not have permissions. Confirm database user and name.",
"procedure": "BatchCreateSessions",
"sid": "04364984-a6d0-4e2c-93c7-5c44e2359502",
"success": false,
"time": "2024-03-13T01:25:48.568Z",
"uid": "1de57538-2eea-438b-a52d-3098f8093b28",
"user": "[email protected]"
}
TSPN001I
Spanner RPC
Example:
{
"args": {
"query_options": {},
"request_options": {},
"seqno": 1,
"session": "projects/project-id/instances/instance-id/databases/dev-db/sessions/ABCDEF1234567890Aye8_QwuELYD9rxa74YTWc-lu9LNuDDADbi4EOGm2C2j0ixe",
"sql": "select * from TestTable",
"transaction": {
"Selector": {
"SingleUse": {
"Mode": {
"ReadOnly": {
"TimestampBound": {
"Strong": true
},
"return_read_timestamp": true
}
}
}
}
}
},
"cluster_name": "root",
"code": "TSPN001I",
"db_name": "dev-db",
"db_origin": "dynamic",
"db_protocol": "spanner",
"db_service": "teleport-spanner",
"db_type": "spanner",
"db_uri": "spanner.googleapis.com:443",
"db_user": "some-user",
"event": "db.session.spanner.rpc",
"procedure": "ExecuteStreamingSql",
"sid": "406b9883-0e16-42f2-9d0b-b3bd956f9cd4",
"success": true,
"time": "2024-03-13T00:02:44.739Z",
"uid": "e0625e79-9399-4ea3-aa8b-dba1eb98658d",
"user": "[email protected]"
}
db.session.sqlserver.rpc_request
SQLServer RPC Request
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TMS00I",
"db_name": "master",
"db_protocol": "sqlserver",
"db_service": "sqlserver02",
"db_uri": "localhost:1433",
"db_user": "sqlserver",
"ei": 7,
"event": "db.session.sqlserver.rpc_request",
"parameters": [
"SELECT\ndtb.collation_name AS [Collation],\ndtb.name AS [DatabaseName2]\nFROM\nmaster.sys.databases AS dtb\nWHERE\n(dtb.name=@_msparam_0)"
],
"proc_name": "Sp_ExecuteSql",
"sid": "6b37d89b-0d9c-4681-976b-ba12588a1bcd",
"time": "2022-06-02T08:29:17.693Z",
"uid": "a29dfad1-5a71-4c48-b4e0-10d1d857a23c",
"user": "alice"
}
db.session.start
There are multiple events with the db.session.start type.
TDB00I
Database Session Started
Example:
{
"cluster_name": "root",
"code": "TDB00I",
"db_name": "",
"db_protocol": "mongodb",
"db_service": "mongo-primary",
"db_uri": "mongodb://mongo-1:27017,mongo-2:27018/?replicaSet=rs0",
"db_user": "alice",
"ei": 0,
"event": "db.session.start",
"namespace": "default",
"server_id": "05ff66c9-a948-42f4-af0e-a1b6ba62561e",
"sid": "13c04d4b-2e94-4106-a3a1-5ab8aae10465",
"success": true,
"time": "2021-07-14T07:01:31.958Z",
"uid": "4a613b84-7315-41f4-9219-1afd6b08d4da",
"user": "[email protected]"
}
TDB00W
Database Session Denied
Example:
{
"code": "TDB00W",
"event": "db.session.start",
"time": "2020-06-05T16:24:05Z",
"uid": "68a83a99-73ce-4bd7-bbf7-99103c2ba6a0"
}
db.session.user.create
There are multiple events with the db.session.user.create type.
TDB08I
Database User Created
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TDB08I",
"db_name": "master",
"db_protocol": "postgres",
"db_service": "postgres-local",
"db_uri": "localhost:1433",
"db_user": "alice",
"ei": 0,
"event": "db.session.user.create",
"private_key_policy": "none",
"roles": null,
"sid": "47f20b91-f5c3-4eef-85e1-9509252238e7",
"success": true,
"time": "2022-06-02T08:46:33.825Z",
"uid": "95e74359-e5a1-4c76-970e-c522b550dbb9",
"user": "alice",
"user_kind": 1,
"username": "alice"
}
TDB08W
Database User Creation Failed
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TDB08W",
"db_name": "master",
"db_protocol": "postgres",
"db_service": "postgres-local",
"db_uri": "localhost:1433",
"db_user": "alice",
"ei": 0,
"error": "dummy error",
"event": "db.session.user.create",
"message": "dummy error",
"private_key_policy": "none",
"roles": null,
"sid": "3fd14bfe-be21-40a4-b1da-744fa14f5108",
"success": false,
"time": "2022-06-02T08:46:33.825Z",
"uid": "4a4a6a70-c81d-4326-8565-3f7bd23b874f",
"user": "ben",
"user_kind": 1,
"username": "ben"
}
db.session.user.deactivate
There are multiple events with the db.session.user.deactivate type.
TDB09I
Database User Deactivated
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TDB09I",
"db_name": "master",
"db_protocol": "postgres",
"db_service": "postgres-local",
"db_uri": "localhost:1433",
"db_user": "alice",
"delete": false,
"ei": 5,
"event": "db.session.user.deactivate",
"private_key_policy": "none",
"sid": "c362e10b-dbc4-44e5-b90f-0bee5dd0c623",
"success": true,
"time": "2022-06-02T08:46:33.825Z",
"uid": "0ab70491-4d33-4bc5-be58-27922a647f50",
"user": "ben",
"user_kind": 1,
"username": "ben"
}
TDB09W
Database User Deactivate Failure
Example:
{
"cluster_name": "im-a-cluster-name",
"code": "TDB09W",
"db_name": "master",
"db_protocol": "postgres",
"db_service": "postgres-local",
"db_uri": "localhost:1433",
"db_user": "alice",
"delete": false,
"ei": 4,
"error": "dummy error",
"event": "db.session.user.deactivate",
"message": "dummy error",
"private_key_policy": "none",
"sid": "3bb429a1-be03-4c03-827c-98ff846dacf7",
"success": false,
"time": "2022-06-02T08:46:33.825Z",
"uid": "c6569248-ac06-417d-b5b6-e0bf94eccb1a",
"user": "ben",
"user_kind": 1,
"username": "ben"
}
db.update
Database Updated
Example:
{
"cluster_name": "root",
"code": "TDB04I",
"db_labels": {
"env": "local",
"teleport.dev/origin": "dynamic"
},
"db_protocol": "postgres",
"db_uri": "localhost:5432",
"ei": 0,
"event": "db.update",
"expires": "0001-01-01T00:00:00Z",
"name": "postgres-local",
"time": "2021-10-08T15:42:24.581Z",
"uid": "fe631a5a-6418-49d6-99e7-5280654663ec",
"user": "05ff66c9-a948-42f4-af0e-a1b6ba62561e.root"
}
Was this page helpful?