"query": "DELETE FROM t1" 

• server_id 

An unsigned integer representing the server ID. This is the same as the value of the server_id  system variable. 

Example: 

"server_id": 1 

• sql_command 

A string that indicates the SQL statement type. 

Example: 

"sql_command": "insert" 

The values correspond to the statement/sql/ xxx  command counters. For example, xxx  is drop_table  and select  for DROP TABLE  and SELECT  statements, respectively. The following statement displays the possible names: 

SELECT REPLACE(EVENT_NAME, ’statement/sql/’, ’’) AS name FROM performance_schema.events_statements_summary_global_by_event_name WHERE EVENT_NAME LIKE ’statement/sql/%’ ORDER BY name; 

• status 

An unsigned integer representing the command status: 0 for success, nonzero if an error occurred. This is the same as the value of the mysql_errno() C API function. 

The audit log does not contain the SQLSTATE value or error message. To see the associations between error codes, SQLSTATE values, and messages, see Server Error Message Reference. 

Warnings are not logged. 

Example: 

"status": 1051 

• table 

A string representing a table name. 

Example: 

"table": "t1" 

• user 

A string representing a user name. The meaning differs depending on the item within which user occurs: 

•Within account  items, user  is a string representing the user that the server authenticated the client as. This is the user name that the server uses for privilege checking. 

•Within login  items, user  is a string representing the user name sent by the client. 

