STL_CONNECTION_LOG - Amazon Redshift


Logs authentication attempts and connections and disconnections.

This view is visible only to superusers. For more information, see Visibility of data in system tables and views.

Table columns

Column name Data type Description
event character(50) Connection or authentication event.
recordtime timestamp Time the event occurred.
remotehost character(32) Name or IP address of remote host.
remoteport character(32) Port number for remote host.
pid integer Process ID associated with the statement.
dbname character(50) Database name.
username character(50) User name.
authmethod character(32) Authentication method.
duration integer Duration of connection in microseconds.
sslversion character(50) Secure Sockets Layer (SSL) version.
sslcipher character(128) SSL cipher.
mtu integer Maximum transmission unit (MTU).
sslcompression character(64) SSL compression type.
sslexpansion character(64) SSL expansion type.
iamauthguid character(36) The IAM authentication ID for the CloudTrail request.
application_name character(250) The initial or updated name of the application for a session.
driver_version character(64) The version of ODBC or JDBC driver that connects to your Amazon Redshift cluster from your third-party SQL client tools.
os_version character(64) The version of the operating system that is on the client machine that connects to your Amazon Redshift cluster.
plugin_name character(32) The name of the plugin used to connect to your Amazon Redshift cluster.

Sample queries

To view the details for open connections, execute the following query.

select recordtime, username, dbname, remotehost, remoteport from stl_connection_log where event = 'initiating session' and pid not in (select pid from stl_connection_log where event = 'disconnecting session') order by 1 desc; recordtime | username | dbname | remotehost | remoteport --------------------+-------------+------------+---------------+--------------------------------- 2014-11-06 20:30:06 | rdsdb | dev | [local] | 2014-11-06 20:29:37 | test001 | test | | 11111 2014-11-05 20:30:29 | rdsdb | dev | | 33333 2014-11-05 20:28:35 | rdsdb | dev | [local] | (4 rows)

The following example reflects a failed authentication attempt and a successful connection and disconnection.

select event, recordtime, remotehost, username from stl_connection_log order by recordtime; event | recordtime | remotehost | username -----------------------+---------------------------+--------------+--------- authentication failure | 2012-10-25 14:41:56.96391 | | john authenticated | 2012-10-25 14:42:10.87613 | | john initiating session | 2012-10-25 14:42:10.87638 | | john disconnecting session | 2012-10-25 14:42:19.95992 | | john (4 rows)

The following example shows the version of the ODBC driver, the operating system on the client machine, and the plugin used to connect to the Amazon Redshift cluster. In this example, the plugin used is for standard ODBC driver authentication using a login name and password.

select driver_version, os_version, plugin_name from stl_connection_log; driver_version | os_version | plugin_name ----------------------------------------+-----------------------------------+-------------------- Amazon Redshift ODBC Driver | Darwin 18.7.0 x86_64 | none Amazon Redshift ODBC Driver | Linux 4.15.0-101-generic x86_64 | none