MySQL Enterprise Audit Each event contains event class-specific fields that can be accessed from within a filter to perform custom filtering. A connection event indicates when a connection-related activity occurs during a session, such as a user connecting to or disconnecting from the server. Table 6.31, “Connection Event Fields”  indicates the permitted fields for connection events. 1510 Table 6.31 Connection Event Fields "name": "status", "log": { "field": { "name": "general_command.str", "value": "Query" } } } } } } Field Name Field Type Description status integer Event status: 0: OK Otherwise: Failed connection_id unsigned integer Connection ID user.str string User name specified during authentication user.length unsigned integer User name length priv_user.str string Authenticated user name (account user name) priv_user.length unsigned integer Authenticated user name length external_user.str string External user name (provided by third-party authentication plugin) external_user.length unsigned integer External user name length proxy_user.str string Proxy user name proxy_user.length unsigned integer Proxy user name length host.str string Connected user host host.length unsigned integer Connected user host length ip.str string Connected user IP address ip.length unsigned integer Connected user IP address length database.str string Database name specified at connect time database.length unsigned integer Database name length connection_type integer Connection type: or  "::undefined" : Undefined or  "::tcp/ip" : TCP/IP or  "::socket" : Socket