MySQL Enterprise Audit A string representing the client host name. Example: "host": "localhost" A string representing the client IP address. Example: "ip": "::1" A string representing the MySQL server version. This is the same as the value of the  VERSION() function or  version  system variable. Example: "mysql_version": "5.7.21-log" A string representing the external user name used during the authentication process, as set by the plugin used to authenticate the client. With native (built-in) MySQL authentication, or if the plugin does not set the value, this attribute is empty. The value is the same as that of the  external_user  system variable. See Section 6.2.18, “Proxy Users” . Example: "os": "jeffrey" A string representing the operating system on which the server was built or is running. Example: "os_version": "i686-Linux" A string representing the proxy user (see Section 6.2.18, “Proxy Users” ). The value is empty if user proxying is not in effect. Example: "proxy": "developer" A string representing the text of an SQL statement. The value can be empty. Long values may be truncated. The string, like the audit log file itself, is written using UTF-8 (up to 4 bytes per character), so the value may be the result of conversion. For example, the original statement might have been received from the client as an SJIS string. Example: 1487 • ip • mysql_version • os • os_version • proxy • query