CassandraAudit

Detailed audit records for CQL operations and login attempts.

Table attributes

Attribute	Value
Resource types	microsoft.documentdb/cassandraclusters
Categories	Audit
Solutions	LogManagement
Basic log	No
Ingestion-time transformation	No
Sample Queries	-

Column	Type	Description
BatchId	string	Internal identifier shared by all statements in a batch operation.
_BilledSize	real	The record size in bytes
ClientIP	string	Client IP address.
ClientPort	string	Client port.
ClusterName	string	Cluster name.
CoordinatorIP	string	Host address of the coordinator node.
ExternalUserId	string	External user identity.
_IsBillable	string	Specifies whether ingesting the data is billable. When _IsBillable is `false` ingestion isn't billed to your Azure account
Operation	string	The CQL statement or a textual description of the operation.
OperationNaked	string	The CQL statement or a textual description of the operation, without bound values appended to prepared statements.
_ResourceId	string	A unique identifier for the resource that the record is associated with
SourceSystem	string	The type of agent the event was collected by. For example, `OpsManager` for Windows agent, either direct connect or Operations Manager, `Linux` for all Linux agents, or `Azure` for Azure Diagnostics
Status	string	Value is either ATTEMPT or FAILED.
_SubscriptionId	string	A unique identifier for the subscription that the record is associated with
TenantId	string	The Log Analytics workspace ID
TimeGenerated	datetime	Date and time the record was created.
Type	string	The name of the table
User	string	Username of the authenticated user.