v.24.6New Feature

Introduced used_privileges and missing_privileges columns in system.query_log

Official CH changelog text
Introduced two additional columns in the system.query_log: used_privileges and missing_privileges. used_privileges is populated with the privileges that were checked during query execution, and missing_privileges contains required privileges that are missing. #64597 (Alexey Katsman).
Added two new columns, used_privileges and missing_privileges, to the system.query_log table for enhanced privilege auditing.

Why it matters

This feature allows users to track which privileges were checked during query execution (used_privileges) and identify any required but missing privileges (missing_privileges). It improves security auditing and troubleshooting of permission-related issues.

How to use it

Users can query the system.query_log table to view the new used_privileges and missing_privileges columns alongside other query information. No special configuration is required; these columns are populated automatically for each logged query.

Related resources

PreviousNext