Audit Logging
Rockset provides visibility into your account through the notion of events. Events are stored as documents in a special collection called _events.
List of Events
All events have the following fields:
_id- a unique event identiferevent_time- the time at which the event occurred, in milliseconds after January 1, 1970 (UTC).label- one of the labels listed in the table belowkind- can beAPI_KEY,COLLECTION,INGEST,INTEGRATION,ORGANIZATIONQUERY, orUSERtype- can beINFO,WARNING,ERROR, orDEBUG
Events may also have additional fields depending on the specific event. All supported events are listed in the table below, as well as additional fields for each event label.
| Label | Kind | Type | Additional Fields |
|---|---|---|---|
| API_KEY_CREATED | API_KEY | INFO | api_key_name , user_email , details |
| API_KEY_DELETED | API_KEY | INFO | api_key_name , user_email , details |
| API_KEY_ERROR | API_KEY | ERROR | api_key_name , user_email |
| COLLECTION_CREATED | COLLECTION | INFO | collections , user_email |
| COLLECTION_DROPPED | COLLECTION | INFO | collections , user_email |
| INGEST_WARNING | INGEST | WARNING | collections , details |
| INGEST_ERROR | INGEST | ERROR | collections , details |
| INGEST_INFO | INGEST | INFO | collections , details |
| INGEST_INITIALIZED | INGEST | INFO | collections |
| INTEGRATION_CREATED | INTEGRATION | INFO | integrations , user_email |
| QUERY_COLLECTION_NOT_READY | QUERY | ERROR | user_email , details |
| QUERY_ERROR | QUERY | ERROR | user_email , details |
| QUERY_INVALID | QUERY | ERROR | user_email , details |
| QUERY_SUCCESS | QUERY | INFO | user_email , details |
| QUERY_UNIMPLEMENTED | QUERY | ERROR | user_email , details |
| USER_CREATED | USER | INFO | user_email |
| COLLECTION_READY | COLLECTION | INFO | collections , details |
| COLLECTION_PAUSED | COLLECTION | INFO | collections , details |
| ORGANIZATION_INGEST_DISABLED | ORGANIZATION | WARNING | details |
| ORGANIZATION_INGEST_ENABLED | ORGANIZATION | INFO | details |