snowflake-login-logs
Collects Snowflake login history logs.
snowflake-login-logs profile=PROFILE [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss] [order=ORDER]
- profile=PROFILE
- Snowflake profile name
- duration=NUM{mon|w|d|h|m|s}
- Time duration (e.g., 1d, 2h, 30m)
- from=yyyyMMddHHmmss
- Start time
- to=yyyyMMddHHmmss
- End time
- order=ORDER
- Sort order (asc or desc, default: desc)
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| _time | Date | Time | Time (in the UTC time zone) of the event occurrence |
| user | String | User | User associated with this event |
| is_success | Bool | Is Success | Whether the user's request was successful or not |
| src_ip | IP address | Source IP | IP address where the request originated |
| first_authentication_factor | String | First Auth Factor | Method used to authenticate the user |
| second_authentication_factor | String | Second Auth Factor | The second factor in multi factor authentication |
| error_code | Integer | Error Code | Error code, if the request was not successful |
| error_message | String | Error Message | Error message returned to the user, if the request was not successful |
| reported_client_type | String | Client Type | Reported type of the client software... not authenticated |
| reported_client_version | String | Client Version | Reported version of the client software... not authenticated |
| event_id | Long | Event ID | Internal/system-generated identifier for the login attempt |