The sensor main log and sensor DBMS instance log entries in the log file use the format: <DATE> T[<THREAD ID>] F[<FILE NAME>] L[<LINE NUMBER>] <SEVERITY> <MESSAGE>.
Sample log message:
Fri May 27 2022 19:22:11.056 T[6504] F[Profile.cpp] L[935] NOTICE Loading profile
The logs contain these fields:
DATE — Date and time when the log line is written and formatted according to the local time zone of the system where the sensor runs.
THREAD ID — Operating system thread ID. The sensor is a multi-threaded process. Every thread is logged separately and each thread can be identified by this field.
FILE NAME, LINE NUMBER — Source file name and line number where the log line was called in the code. This helps Customer Success and engineering to identify the code that generated the log entry.
SEVERITY — Severity of the log entry. These are the available log severity levels in order of severity:
ERROR — Unexpected error or conditions that the sensor has encountered. Log lines with the ERROR severity indicate a problem that requires review.
WARNING — Warning conditions that might later lead to an error. These log entries can provide insight into subsequent errors. These log entries do not require review if not accompanied by ERROR entries.
NOTICE — Sensor's default log level, useful information about the proper operation of the sensor. It is regular application usage recorded in the log file.
INFO — Medium level of detailed information about sensor operation. This log level might be requested by Customer Success for troubleshooting if DEBUG is generating too many log entries and logs roll over. It logs application usage details.
DEBUG — High level of detailed information about sensor operation. This log level is used by support and engineering teams for troubleshooting issues.
TRACE — Low level tracing information that might be requested by development teams. This log level is intensive as every loggable event in the Database Security sensor is log. It must not be set unless explicitly requested by Customer Success.
MESSAGE — Log message contains the details logged by the sensor. The message can span multiple lines.
Note
The minimum log level to log sensor activity is configured on the Sensor properties page in the management console. The default and recommended level is NOTICE, meaning that NOTICE, WARNING, and ERROR log lines are written to the log file. Changing to a log level below NOTICE can cause extensive logging and affect sensor resource usage.