Audit logging event categories and types
All events have both a category and a type.
A type usually maps directly to a CQL command.
The following list shows all the types in each category.
Data Definition Language (DDL)
DDL (Data Definition Language) logs the following database schema changes:
| Event category | CQL commands |
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Data Manipulation Language (DML)
DML (Data Manipulation Language) logs the following database data changes:
| Event category | CQL command |
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
DataStax driver prepared statement, such as Java - Prepared Statement |
Data Control Language (DCL)
DCL (Data Control Language) logs the following database control, or role or permission changes:
| Event category | CQL command |
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
QUERY
QUERY logs the following data retrieval events:
| Event type | CQL or other command |
|---|---|
|
|
|
Remote Procedure Call (RPC) statement. |
AUTH
AUTH logs the following authentication and authorization events:
| Event type | CQLSH command |
|---|---|
|
Successful login attempt. LOGIN and login requests sent from DataStax drivers. |
|
Failed login attempt. |
|
Unauthorized access attempt. |
|
Messages not captured by HCD include:
|
ERROR
ERROR logs the following error events:
| Event type | Information |
|---|---|
ERROR |
Logs |
REQUEST_FAILURE |
Logs failed requests. |
UNKNOWN
UNKNOWN logs the following unknown events:
| Event type | Information |
|---|---|
|
Logs unknown events. |
