fix schemas

Author: ajlam

articles/mariadb/concepts-audit-logs.md

@@ -5,7 +5,7 @@ author: ajlam
 ms.author: andrela
 ms.service: mariadb
 ms.topic: conceptual
-ms.date: 06/24/2019
+ms.date: 06/26/2019
 ---
 
 # Audit Logs in Azure Database for MariaDB
@@ -49,7 +49,7 @@ The following sections describe what's output by MariaDB audit logs based on the
 |---|---|
 | `TenantId` | Your tenant ID |
 | `SourceSystem` | `Azure` |
-| `TimeGenerated` [UTC] | Time stamp when the log was recorded in UTC |
+| `TimeGenerated [UTC]` | Time stamp when the log was recorded in UTC |
 | `Type` | Type of the log. Always `AzureDiagnostics` |
 | `SubscriptionId` | GUID for the subscription that the server belongs to |
 | `ResourceGroup` | Name of the resource group the server belongs to |
@@ -59,13 +59,13 @@ The following sections describe what's output by MariaDB audit logs based on the
 | `Resource` | Name of the server |
 | `Category` | `MySqlAuditLogs` |
 | `OperationName` | `LogEvent` |
-| `event_class` | `connection_log` |
-| `event_subclass` | `CONNECT`, `DISCONNECT` |
-| `connection_id` | Unique connection ID generated by MariaDB |
-| `host` | Blank |
-| `ip` | IP address of client connecting to MariaDB |
-| `user` | Name of user executing the query |
-| `db` | Name of database connected to |
+| `event_class_s` | `connection_log` |
+| `event_subclass_s` | `CONNECT`, `DISCONNECT` |
+| `connection_id_d` | Unique connection ID generated by MariaDB |
+| `host_s` | Blank |
+| `ip_s` | IP address of client connecting to MariaDB |
+| `user_s` | Name of user executing the query |
+| `db_s` | Name of database connected to |
 | `\_ResourceId` | Resource URI |
 
 ### General
@@ -76,7 +76,7 @@ Schema below applies to GENERAL, DML_SELECT, DML_NONSELECT, DML, DDL, DCL, and A
 |---|---|
 | `TenantId` | Your tenant ID |
 | `SourceSystem` | `Azure` |
-| `TimeGenerated` [UTC] | Time stamp when the log was recorded in UTC |
+| `TimeGenerated [UTC]` | Time stamp when the log was recorded in UTC |
 | `Type` | Type of the log. Always `AzureDiagnostics` |
 | `SubscriptionId` | GUID for the subscription that the server belongs to |
 | `ResourceGroup` | Name of the resource group the server belongs to |
@@ -86,15 +86,16 @@ Schema below applies to GENERAL, DML_SELECT, DML_NONSELECT, DML, DDL, DCL, and A
 | `Resource` | Name of the server |
 | `Category` | `MySqlAuditLogs` |
 | `OperationName` | `LogEvent` |
-| `event_class` | `general_log` |
-| `event_subclass` | `LOG`, `ERROR`, `RESULT` |
+| `LogicalServerName_s` | Name of the server |
+| `event_class_s` | `general_log` |
+| `event_subclass_s` | `LOG`, `ERROR`, `RESULT` |
 | `event_time` | Query start seconds in UNIX timestamp |
-| `error_code` | Error code if query failed. `0` means no error |
-| `thread_id` | ID of thread that executed the query |
-| `host` | Blank |
-| `ip` | IP address of client connecting to MariaDB |
-| `user` | Name of user executing the query |
-| `sql_text` | Full query text |
+| `error_code_d` | Error code if query failed. `0` means no error |
+| `thread_id_d` | ID of thread that executed the query |
+| `host_s` | Blank |
+| `ip_s` | IP address of client connecting to MariaDB |
+| `user_s` | Name of user executing the query |
+| `sql_text_s` | Full query text |
 | `\_ResourceId` | Resource URI |
 
 ### Table access
@@ -103,7 +104,7 @@ Schema below applies to GENERAL, DML_SELECT, DML_NONSELECT, DML, DDL, DCL, and A
 |---|---|
 | `TenantId` | Your tenant ID |
 | `SourceSystem` | `Azure` |
-| `TimeGenerated` [UTC] | Time stamp when the log was recorded in UTC |
+| `TimeGenerated [UTC]` | Time stamp when the log was recorded in UTC |
 | `Type` | Type of the log. Always `AzureDiagnostics` |
 | `SubscriptionId` | GUID for the subscription that the server belongs to |
 | `ResourceGroup` | Name of the resource group the server belongs to |
@@ -113,12 +114,13 @@ Schema below applies to GENERAL, DML_SELECT, DML_NONSELECT, DML, DDL, DCL, and A
 | `Resource` | Name of the server |
 | `Category` | `MySqlAuditLogs` |
 | `OperationName` | `LogEvent` |
-| `event_class` | `table_access_log` |
-| `event_subclass` | `READ`, `INSERT`, `UPDATE`, or `DELETE` |
-| `connection_id` | Unique connection ID generated by MariaDB |
-| `db` | Name of database accessed |
-| `table` | Name of table accessed |
-| `sql_text` | Full query text |
+| `LogicalServerName_s` | Name of the server |
+| `event_class_s` | `table_access_log` |
+| `event_subclass_s` | `READ`, `INSERT`, `UPDATE`, or `DELETE` |
+| `connection_id_d` | Unique connection ID generated by MariaDB |
+| `db_s` | Name of database accessed |
+| `table_s` | Name of table accessed |
+| `sql_text_s` | Full query text |
 | `\_ResourceId` | Resource URI |
 
 ## Next steps

articles/mysql/concepts-audit-logs.md

@@ -5,7 +5,7 @@ author: ajlam
 ms.author: andrela
 ms.service: mysql
 ms.topic: conceptual
-ms.date: 06/11/2019
+ms.date: 06/26/2019
 ---
 
 # Audit Logs in Azure Database for MySQL
@@ -50,7 +50,7 @@ The following sections describe what's output by MySQL audit logs based on the e
 |---|---|
 | `TenantId` | Your tenant ID |
 | `SourceSystem` | `Azure` |
-| `TimeGenerated` [UTC] | Time stamp when the log was recorded in UTC |
+| `TimeGenerated [UTC]` | Time stamp when the log was recorded in UTC |
 | `Type` | Type of the log. Always `AzureDiagnostics` |
 | `SubscriptionId` | GUID for the subscription that the server belongs to |
 | `ResourceGroup` | Name of the resource group the server belongs to |
@@ -60,13 +60,14 @@ The following sections describe what's output by MySQL audit logs based on the e
 | `Resource` | Name of the server |
 | `Category` | `MySqlAuditLogs` |
 | `OperationName` | `LogEvent` |
-| `event_class` | `connection_log` |
-| `event_subclass` | `CONNECT`, `DISCONNECT`, `CHANGE USER` (only available for MySQL 5.7) |
-| `connection_id` | Unique connection ID generated by MySQL |
-| `host` | Blank |
-| `ip` | IP address of client connecting to MySQL |
-| `user` | Name of user executing the query |
-| `db` | Name of database connected to |
+| `LogicalServerName_s` | Name of the server |
+| `event_class_s` | `connection_log` |
+| `event_subclass_s` | `CONNECT`, `DISCONNECT`, `CHANGE USER` (only available for MySQL 5.7) |
+| `connection_id_d` | Unique connection ID generated by MySQL |
+| `host_s` | Blank |
+| `ip_s` | IP address of client connecting to MySQL |
+| `user_s` | Name of user executing the query |
+| `db_s` | Name of database connected to |
 | `\_ResourceId` | Resource URI |
 
 ### General
@@ -77,7 +78,7 @@ Schema below applies to GENERAL, DML_SELECT, DML_NONSELECT, DML, DDL, DCL, and A
 |---|---|
 | `TenantId` | Your tenant ID |
 | `SourceSystem` | `Azure` |
-| `TimeGenerated` [UTC] | Time stamp when the log was recorded in UTC |
+| `TimeGenerated [UTC]` | Time stamp when the log was recorded in UTC |
 | `Type` | Type of the log. Always `AzureDiagnostics` |
 | `SubscriptionId` | GUID for the subscription that the server belongs to |
 | `ResourceGroup` | Name of the resource group the server belongs to |
@@ -87,15 +88,16 @@ Schema below applies to GENERAL, DML_SELECT, DML_NONSELECT, DML, DDL, DCL, and A
 | `Resource` | Name of the server |
 | `Category` | `MySqlAuditLogs` |
 | `OperationName` | `LogEvent` |
-| `event_class` | `general_log` |
-| `event_subclass` | `LOG`, `ERROR`, `RESULT` (only available for MySQL 5.6) |
+| `LogicalServerName_s` | Name of the server |
+| `event_class_s` | `general_log` |
+| `event_subclass_s` | `LOG`, `ERROR`, `RESULT` (only available for MySQL 5.6) |
 | `event_time` | Query start seconds in UNIX timestamp |
-| `error_code` | Error code if query failed. `0` means no error |
-| `thread_id` | ID of thread that executed the query |
-| `host` | Blank |
-| `ip` | IP address of client connecting to MySQL |
-| `user` | Name of user executing the query |
-| `sql_text` | Full query text |
+| `error_code_d` | Error code if query failed. `0` means no error |
+| `thread_id_d` | ID of thread that executed the query |
+| `host_s` | Blank |
+| `ip_s` | IP address of client connecting to MySQL |
+| `user_s` | Name of user executing the query |
+| `sql_text_s` | Full query text |
 | `\_ResourceId` | Resource URI |
 
 ### Table access
@@ -104,7 +106,7 @@ Schema below applies to GENERAL, DML_SELECT, DML_NONSELECT, DML, DDL, DCL, and A
 |---|---|
 | `TenantId` | Your tenant ID |
 | `SourceSystem` | `Azure` |
-| `TimeGenerated` [UTC] | Time stamp when the log was recorded in UTC |
+| `TimeGenerated [UTC]` | Time stamp when the log was recorded in UTC |
 | `Type` | Type of the log. Always `AzureDiagnostics` |
 | `SubscriptionId` | GUID for the subscription that the server belongs to |
 | `ResourceGroup` | Name of the resource group the server belongs to |
@@ -114,12 +116,13 @@ Schema below applies to GENERAL, DML_SELECT, DML_NONSELECT, DML, DDL, DCL, and A
 | `Resource` | Name of the server |
 | `Category` | `MySqlAuditLogs` |
 | `OperationName` | `LogEvent` |
-| `event_class` | `table_access_log` |
-| `event_subclass` | `READ`, `INSERT`, `UPDATE`, or `DELETE` |
-| `connection_id` | Unique connection ID generated by MySQL |
-| `db` | Name of database accessed |
-| `table` | Name of table accessed |
-| `sql_text` | Full query text |
+| `LogicalServerName_s` | Name of the server |
+| `event_class_s` | `table_access_log` |
+| `event_subclass_s` | `READ`, `INSERT`, `UPDATE`, or `DELETE` |
+| `connection_id_d` | Unique connection ID generated by MySQL |
+| `db_s` | Name of database accessed |
+| `table_s` | Name of table accessed |
+| `sql_text_s` | Full query text |
 | `\_ResourceId` | Resource URI |
 
 ## Next steps