User guide

DescriptionColumn name
Action that occurred. Valid values:
• Alter
• Create
• Drop
• Rename
action
If true (1), indicates that the user has create database privileges.usecreatedb
If true (1), indicates that the user is a superuser.usesuper
If true (1), indicates that the user can update system catalogs.usecatupd
Password expiration date.valuntil
Process ID.pid
Transaction ID.xid
Time in UTC that the query started.recordtime
User Activity Log
Logs each query before it is run on the database.
DescriptionColumn name
Time the event occurred.recordtime
Database name.db
User name.user
Process ID associated with the statement.pid
User ID.userid
Transaction ID.xid
A prefix of LOG: followed by the text of the query, including newlines.query
Enabling Logging
Audit logging is not enabled by default in Amazon Redshift. When you enable logging on your cluster,
Amazon Redshift creates and uploads logs to Amazon S3 that capture data from the creation of the
cluster to the present time. Each logging update is a continuation of the information that was already
logged.
Note
Audit logging to Amazon S3 is an optional, manual process. When you enable logging on your
cluster, you are enabling logging to Amazon S3 only. Logging to system tables is not optional
and happens automatically for the cluster. For more information about logging to system tables,
see System Tables Reference in the Amazon Redshift Database Developer Guide.
API Version 2012-12-01
217
Amazon Redshift Management Guide
User Activity Log