Snowflake spans

Latest Dynatrace
Reference

Span records emitted by Dynatrace Snowflake Observability Agent plugins from Snowflake ACCOUNT_USAGE views.

Query

Fetch the 50 most recent Dynatrace Snowflake Observability Agent event_log spans (traced records from the Snowflake event table).

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| sort timestamp desc
| limit 50

Inspect event_log spans correlated to a Snowflake query, including warehouse and role context.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| filter isNotNull(snowflake.query.id)
| fields timestamp, snowflake.query.id, snowflake.warehouse.name, snowflake.role.name
| sort timestamp desc
| limit 50

Count event_log spans grouped by warehouse.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| filter isNotNull(snowflake.warehouse.name)
| summarize { spans = count() }, by: { snowflake.warehouse.name }
| sort spans desc

Snowflake event log spans

Span records emitted by the Dynatrace Snowflake Observability Agent event_log plugin.

Query

Fetch the 50 most recent Dynatrace Snowflake Observability Agent event_log spans (traced records from the Snowflake event table).

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| sort timestamp desc
| limit 50

Inspect event_log spans correlated to a Snowflake query, including warehouse and role context.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| filter isNotNull(snowflake.query.id)
| fields timestamp, snowflake.query.id, snowflake.warehouse.name, snowflake.role.name
| sort timestamp desc
| limit 50

Count event_log spans grouped by warehouse.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| filter isNotNull(snowflake.warehouse.name)
| summarize { spans = count() }, by: { snowflake.warehouse.name }
| sort spans desc

Dynatrace Snowflake Observability Agent resource fields

Fields present on all Dynatrace Snowflake Observability Agent telemetry records. Synced with config.py RESOURCE_ATTRIBUTES.

Attribute	Type	Description	Examples
`db.system`	string	experimental Display name: `Database system` An identifier for the database management system (DBMS) product being used. See below for a list of well-known identifiers. ¹	`mongodb`; `mysql`
`deployment.environment`	string	resource deprecated Use deployment.environment.name instead. Display name: `Snowflake deployment environment` Deprecated alias for deployment.environment.name. The deployment environment, for example, production, staging, or development. Will be removed in release 1.3.0. ²	`PROD`
`deployment.environment.name`	string	resource stable Display name: `Snowflake deployment environment name` The deployment environment name (OTel semconv canonical field), for example, production, staging, or development. Emitted alongside deployment.environment during the deprecation window. ³	`PROD`
`deployment.environment.tag`	string	resource stable Display name: `Deployment environment tag` Optional tag for the deployment environment in multitenancy mode ⁴	`SA080`
`dsoa.run.context`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution context` The name of the Dynatrace Snowflake Observability Agent context (part of plugin) used to produce the telemetry (logs, traces, metrics, or events). In case of multiple contexts within the same plugin, this helps differentiate between them. If plugin delivers only one context, this field will have the same value as the plugin name. ⁵	`users_all_roles`
`dsoa.run.id`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution unique identifier` Unique ID of each execution of the Dynatrace Snowflake Observability Agent plugin. It can be used to differentiate between telemetry produced between two executions, for example, to calculate the change in the system. ⁶	`4aa7c76c-e98c-4b8b-a5b3-a8a721bbde2d`
`dsoa.run.plugin`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution plugin name` The name of the Dynatrace Snowflake Observability Agent plugin that produced this telemetry. Use to filter all telemetry from a specific plugin (for example, 'query_history', 'warehouse_usage'). Distinct from dsoa.run.context, which may represent a sub-context within a plugin. ⁷	`users`
`host.name`	string	resource experimental Display name: `Host name` The host name as determined on the data source (for instance, OneAgent, extensions or OpenTelemetry). Important: This is not the name of the host entity, which can be modified based on naming rules. ⁸ Tags: `permission`	`ip-10-178-54-32.ec2.internal`
`service.name`	string	resource stable Display name: `OTel service name` The logical name of the service. ⁹	`shoppingcart`
`telemetry.exporter.name`	string	resource experimental Display name: `Telemetry exporter name` The exporter name. ¹⁰	`odin`
`telemetry.exporter.version`	string	resource experimental Display name: `Telemetry exporter version` The full agent/exporter version. ¹¹	`1.285.1.20240101-256988`

Always 'snowflake' for all Dynatrace Snowflake Observability Agent telemetry.

User-configured deployment environment label, for example, 'PROD', 'STG', or 'DEV'. Set via 'core.snowflake.deployment_environment'.

User-configured deployment environment label (OTel-stable canonical key), for example, 'PROD', 'STG', or 'DEV'. Set via 'core.snowflake.deployment_environment'. Prefer this key over the deprecated deployment.environment alias.

⁴

Optional user-defined tag for grouping Snowflake accounts in multitenancy mode, set via 'core.tag'.

⁵

Identifies the specific sub-context within the plugin (for example, 'query_history', 'users_all_roles').

⁶

Unique identifier for a single Dynatrace Snowflake Observability Agent execution run. Changes on every invocation.

⁷

The Dynatrace Snowflake Observability Agent plugin that produced this telemetry (for example, 'query_history', 'warehouse_usage').

⁸

The Snowflake account hostname (for example, 'xy12345.snowflakecomputing.com'), from 'core.snowflake.host_name'.

⁹

Always the Snowflake account identifier without '.snowflakecomputing.com' suffix (for example, 'myorg-myaccount').

¹⁰

Always 'dynatrace.snowagent' — identifies Dynatrace Snowflake Observability Agent as the telemetry exporter.

¹¹

The installed Dynatrace Snowflake Observability Agent version in <major>.<minor>.<patch>.<build> format.

db.system has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.

Value	Description	Display name
`adabas`	Adabas (Adaptable Database System)	Adabas
`amazon-documentdb`	Amazon DocumentDB	DocumentDB
`aurora-mysql`	Amazon Aurora MySQL	Aurora MySQL
`aurora-postgresql`	Amazon Aurora PostgreSQL	Aurora PostgreSQL
`cache`	InterSystems Caché	InterSystems Caché
`cassandra`	Apache Cassandra	Cassandra
`clickhouse`	ClickHouse	ClickHouse
`cloudscape`	Cloudscape	Cloudscape
`cockroachdb`	CockroachDB	CockroachDB
`coldfusion`	ColdFusion IMQ	ColdFusion IMQ
`cosmosdb`	Microsoft Azure Cosmos DB	Cosmos DB
`couchbase`	Couchbase	Couchbase
`couchdb`	CouchDB	CouchDB
`databricks`	Databricks Data Platform	Databricks Data Platform
`db2`	IBM Db2	IBM Db2
`derby`	Apache Derby	Derby
`dl/i`	IBM DL/I	IBM DL/I
`dynamodb`	Amazon DynamoDB	DynamoDB
`edb`	EnterpriseDB	EnterpriseDB
`elasticsearch`	Elasticsearch	Elasticsearch
`filemaker`	FileMaker	FileMaker
`firebird`	Firebird	Firebird
`firstsql`	FirstSQL	FirstSQL
`geode`	Apache Geode	Geode
`h2`	H2	H2
`hanadb`	SAP HANA	SAP HANA
`hbase`	Apache HBase	HBase
`hive`	Apache Hive	Hive
`hsqldb`	HyperSQL DataBase	HSQLDB
`informix`	Informix	Informix
`ingres`	Ingres	Ingres
`instantdb`	InstantDB	InstantDB
`interbase`	InterBase	InterBase
`keyspaces-cassandra`	Amazon Keyspaces for Apache Cassandra	Keyspaces
`mariadb`	MariaDB	MariaDB
`maxdb`	SAP MaxDB	SAP MaxDB
`memcached`	Memcached	Memcached
`mongodb`	MongoDB	MongoDB
`mssql`	Microsoft SQL Server	SQL Server
`mssqlcompact`	Microsoft SQL Server Compact	SQL Server Compact
`mysql`	MySQL	MySQL
`neo4j`	Neo4j	Neo4j
`neptune`	Amazon Neptune	Neptune
`netezza`	Netezza	Netezza
`opensearch`	OpenSearch	OpenSearch
`oracle`	Oracle Database	Oracle
`other_sql`	Some other SQL database. Fallback only. See notes.	Other SQL
`pervasive`	Pervasive PSQL	Pervasive PSQL
`phoenix`	Apache Phoenix	Apache Phoenix
`pointbase`	PointBase	PointBase
`postgresql`	PostgreSQL	PostgreSQL
`progress`	Progress Database	Progress
`redis`	Redis	Redis
`redshift`	Amazon Redshift	Redshift
`snowflake`	Snowflake Data Platform	Snowflake Data Platform
`spanner`	Cloud Spanner	Cloud Spanner
`sqlite`	SQLite	SQLite
`sybase`	Sybase	Sybase
`teradata`	Teradata	Teradata
`valkey`	Valkey	Valkey
`vertica`	Vertica	Vertica

Snowflake query history spans

Span records emitted by the Dynatrace Snowflake Observability Agent query_history plugin.

Query

Fetch the 50 most recent Dynatrace Snowflake Observability Agent query_history spans (individual Snowflake query executions).

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "query_history"
| sort timestamp desc
| limit 50

Correlate Dynatrace Snowflake Observability Agent query_history spans by trace.id/span.id to inspect the root span and timing for a Snowflake query execution.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "query_history"
| filter isNotNull(trace.id) and isNotNull(span.id)
| fields trace.id, span.id, request.is_root_span, snowflake.query.id, start_time, end_time
| sort start_time desc
| limit 50

Inspect Snowflake query-plan step/operator span events (snowflake.query.step.*) recorded on query_history spans.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "query_history"
| expand span.events
| filter contains(span.events.name, "snowflake.query.step")
| fields snowflake.query.step.id, snowflake.query.step.operator.type, snowflake.query.step.operator.stats, span.events.timestamp
| sort span.events.timestamp desc
| limit 100

Dynatrace Snowflake Observability Agent resource fields

Fields present on all Dynatrace Snowflake Observability Agent telemetry records. Synced with config.py RESOURCE_ATTRIBUTES.

Attribute	Type	Description	Examples
`db.system`	string	experimental Display name: `Database system` An identifier for the database management system (DBMS) product being used. See below for a list of well-known identifiers. ¹	`mongodb`; `mysql`
`deployment.environment`	string	resource deprecated Use deployment.environment.name instead. Display name: `Snowflake deployment environment` Deprecated alias for deployment.environment.name. The deployment environment, for example, production, staging, or development. Will be removed in release 1.3.0. ²	`PROD`
`deployment.environment.name`	string	resource stable Display name: `Snowflake deployment environment name` The deployment environment name (OTel semconv canonical field), for example, production, staging, or development. Emitted alongside deployment.environment during the deprecation window. ³	`PROD`
`deployment.environment.tag`	string	resource stable Display name: `Deployment environment tag` Optional tag for the deployment environment in multitenancy mode ⁴	`SA080`
`dsoa.run.context`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution context` The name of the Dynatrace Snowflake Observability Agent context (part of plugin) used to produce the telemetry (logs, traces, metrics, or events). In case of multiple contexts within the same plugin, this helps differentiate between them. If plugin delivers only one context, this field will have the same value as the plugin name. ⁵	`users_all_roles`
`dsoa.run.id`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution unique identifier` Unique ID of each execution of the Dynatrace Snowflake Observability Agent plugin. It can be used to differentiate between telemetry produced between two executions, for example, to calculate the change in the system. ⁶	`4aa7c76c-e98c-4b8b-a5b3-a8a721bbde2d`
`dsoa.run.plugin`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution plugin name` The name of the Dynatrace Snowflake Observability Agent plugin that produced this telemetry. Use to filter all telemetry from a specific plugin (for example, 'query_history', 'warehouse_usage'). Distinct from dsoa.run.context, which may represent a sub-context within a plugin. ⁷	`users`
`host.name`	string	resource experimental Display name: `Host name` The host name as determined on the data source (for instance, OneAgent, extensions or OpenTelemetry). Important: This is not the name of the host entity, which can be modified based on naming rules. ⁸ Tags: `permission`	`ip-10-178-54-32.ec2.internal`
`service.name`	string	resource stable Display name: `OTel service name` The logical name of the service. ⁹	`shoppingcart`
`telemetry.exporter.name`	string	resource experimental Display name: `Telemetry exporter name` The exporter name. ¹⁰	`odin`
`telemetry.exporter.version`	string	resource experimental Display name: `Telemetry exporter version` The full agent/exporter version. ¹¹	`1.285.1.20240101-256988`

Always 'snowflake' for all Dynatrace Snowflake Observability Agent telemetry.

User-configured deployment environment label, for example, 'PROD', 'STG', or 'DEV'. Set via 'core.snowflake.deployment_environment'.

⁴

Optional user-defined tag for grouping Snowflake accounts in multitenancy mode, set via 'core.tag'.

⁵

Identifies the specific sub-context within the plugin (for example, 'query_history', 'users_all_roles').

⁶

Unique identifier for a single Dynatrace Snowflake Observability Agent execution run. Changes on every invocation.

⁷

The Dynatrace Snowflake Observability Agent plugin that produced this telemetry (for example, 'query_history', 'warehouse_usage').

⁸

The Snowflake account hostname (for example, 'xy12345.snowflakecomputing.com'), from 'core.snowflake.host_name'.

⁹

Always the Snowflake account identifier without '.snowflakecomputing.com' suffix (for example, 'myorg-myaccount').

¹⁰

Always 'dynatrace.snowagent' — identifies Dynatrace Snowflake Observability Agent as the telemetry exporter.

¹¹

The installed Dynatrace Snowflake Observability Agent version in <major>.<minor>.<patch>.<build> format.

db.system has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.

Value	Description	Display name
`adabas`	Adabas (Adaptable Database System)	Adabas
`amazon-documentdb`	Amazon DocumentDB	DocumentDB
`aurora-mysql`	Amazon Aurora MySQL	Aurora MySQL
`aurora-postgresql`	Amazon Aurora PostgreSQL	Aurora PostgreSQL
`cache`	InterSystems Caché	InterSystems Caché
`cassandra`	Apache Cassandra	Cassandra
`clickhouse`	ClickHouse	ClickHouse
`cloudscape`	Cloudscape	Cloudscape
`cockroachdb`	CockroachDB	CockroachDB
`coldfusion`	ColdFusion IMQ	ColdFusion IMQ
`cosmosdb`	Microsoft Azure Cosmos DB	Cosmos DB
`couchbase`	Couchbase	Couchbase
`couchdb`	CouchDB	CouchDB
`databricks`	Databricks Data Platform	Databricks Data Platform
`db2`	IBM Db2	IBM Db2
`derby`	Apache Derby	Derby
`dl/i`	IBM DL/I	IBM DL/I
`dynamodb`	Amazon DynamoDB	DynamoDB
`edb`	EnterpriseDB	EnterpriseDB
`elasticsearch`	Elasticsearch	Elasticsearch
`filemaker`	FileMaker	FileMaker
`firebird`	Firebird	Firebird
`firstsql`	FirstSQL	FirstSQL
`geode`	Apache Geode	Geode
`h2`	H2	H2
`hanadb`	SAP HANA	SAP HANA
`hbase`	Apache HBase	HBase
`hive`	Apache Hive	Hive
`hsqldb`	HyperSQL DataBase	HSQLDB
`informix`	Informix	Informix
`ingres`	Ingres	Ingres
`instantdb`	InstantDB	InstantDB
`interbase`	InterBase	InterBase
`keyspaces-cassandra`	Amazon Keyspaces for Apache Cassandra	Keyspaces
`mariadb`	MariaDB	MariaDB
`maxdb`	SAP MaxDB	SAP MaxDB
`memcached`	Memcached	Memcached
`mongodb`	MongoDB	MongoDB
`mssql`	Microsoft SQL Server	SQL Server
`mssqlcompact`	Microsoft SQL Server Compact	SQL Server Compact
`mysql`	MySQL	MySQL
`neo4j`	Neo4j	Neo4j
`neptune`	Amazon Neptune	Neptune
`netezza`	Netezza	Netezza
`opensearch`	OpenSearch	OpenSearch
`oracle`	Oracle Database	Oracle
`other_sql`	Some other SQL database. Fallback only. See notes.	Other SQL
`pervasive`	Pervasive PSQL	Pervasive PSQL
`phoenix`	Apache Phoenix	Apache Phoenix
`pointbase`	PointBase	PointBase
`postgresql`	PostgreSQL	PostgreSQL
`progress`	Progress Database	Progress
`redis`	Redis	Redis
`redshift`	Amazon Redshift	Redshift
`snowflake`	Snowflake Data Platform	Snowflake Data Platform
`spanner`	Cloud Spanner	Cloud Spanner
`sqlite`	SQLite	SQLite
`sybase`	Sybase	Sybase
`teradata`	Teradata	Teradata
`valkey`	Valkey	Valkey
`vertica`	Vertica	Vertica

Query history span fields

Attribute fields for query history spans.

Attribute	Type	Description	Examples
`db.snowflake.tables`	string[]	stable Display name: `Snowflake tables used in query` The tables involved in the query.	`['users', 'orders']`
`db.snowflake.views`	string[]	stable Display name: `Snowflake views used in query` The views involved in the query. ¹	`['user_view']`
`dsoa.debug.span.events.added`	long	stable Display name: `Dynatrace Snowflake Observability Agent debug span events added` Internal debug field indicating the number of span events successfully added to the given span.	`5`
`dsoa.debug.span.events.failed`	long	stable Display name: `Dynatrace Snowflake Observability Agent debug span events failed` Internal debug field indicating the number of span events that failed to be added to the given span.	`1`
`dsoa.plugins.query_history.obfuscation_mode`	string	experimental Display name: `Dynatrace Snowflake Observability Agent query history obfuscation mode` Configuration key controlling query text obfuscation mode applied to `db.query.text` and `snowflake.error.message`. ²	`none`
`dsoa.plugins.query_history.track_ddl_changes`	boolean	experimental Display name: `Dynatrace Snowflake Observability Agent query history DDL change tracking indicator` EXPERIMENTAL. When `true`, the plugin surfaces DDL change attribution attributes (`snowflake.object.type`, `.id`, `.name`, `snowflake.object.ddl.operation`, `snowflake.object.ddl.properties`) on `query_history` events whose `ACCESS_HISTORY` row carries an `OBJECT_MODIFIED_BY_DDL` payload. Covers database-object DDL only (tables, views, schemas, procedures). Warehouse and resource-monitor DDL does not populate `OBJECT_MODIFIED_BY_DDL` and is not affected by this setting — use `db.operation.name` for warehouse change detection. Default `false` preserves backward-compatible behavior. May be refactored into a dedicated plugin in a future release. ³	`false`
`snowflake.cluster_number`	long	experimental Display name: `Snowflake warehouse cluster number` The warehouse cluster number associated with the query.	`1`
`snowflake.cost_attribution.period_end`	long	experimental Display name: `Snowflake cost attribution period end` End of the cost attribution summary window.	`1730844667000000000`
`snowflake.cost_attribution.period_start`	long	experimental Display name: `Snowflake cost attribution period start` Start of the cost attribution summary window.	`1730841067000000000`
`snowflake.database.id`	long	stable Display name: `Snowflake database ID` The unique identifier of the database involved in the query. ⁴	`123456`
`snowflake.object.ddl.operation`	string	stable Display name: `Snowflake DDL operation` The SQL keyword that specifies the operation on the table, view, or column.	`REPLACE`
`snowflake.object.type`	string	stable Display name: `Snowflake object type` The domain of the object defined or modified by the DDL operation.	`Table`
`snowflake.query.accel_est.estimated_query_times`	string	stable Display name: `Snowflake query acceleration estimated execution times` Object that contains the estimated query execution time in seconds for different query acceleration scale factors. If the status for the query is not eligible for query acceleration, this object is empty. ⁵	`{ "scaleFactor1": 10, "scaleFactor2": 5 }`
`snowflake.query.accel_est.status`	string	stable Display name: `Snowflake query acceleration status` Indicates whether the query is eligible to benefit from the query acceleration service.	`eligible`
`snowflake.query.accel_est.upper_limit_scale_factor`	long	stable Display name: `Snowflake query acceleration upper limit scale factor` Number of the highest query acceleration scale factor in the estimatedQueryTimes object. If the status for the query is not eligible for query acceleration, this field is set to 0.	`2`
`snowflake.query.data_transfer.inbound.cloud`	string	stable Display name: `Snowflake inbound data transfer cloud` The cloud provider from which data was transferred inbound.	`AWS`
`snowflake.query.data_transfer.inbound.region`	string	stable Display name: `Snowflake inbound data transfer region` The region from which data was transferred inbound.	`us-west-2`
`snowflake.query.data_transfer.outbound.cloud`	string	stable Display name: `Snowflake outbound data transfer cloud` The cloud provider to which data was transferred outbound.	`AWS`
`snowflake.query.data_transfer.outbound.region`	string	stable Display name: `Snowflake outbound data transfer region` The region to which data was transferred outbound.	`us-west-2`
`snowflake.query.is_client_generated`	boolean	stable Display name: `Snowflake client generated query indicator` Indicates if the statement was generated by the client.	`true`
`snowflake.query.retry_cause`	string	stable Display name: `Snowflake query retry cause` The cause for retrying the query, if applicable.	`Network issue`
`snowflake.query.step.id`	long	experimental Display name: `Snowflake query execution step ID` Identifier of the step in the query execution plan. operator_id values are unique within a step, not across the full query.	`1`
`snowflake.query.step.operator.attributes`	string	experimental Display name: `Snowflake query execution operator attributes` Information about the operator, depending on the operator type. ⁶	`{ "equality_join_condition": "(T4.C = T1.C)", "join_type": "INNER" }`
`snowflake.query.step.operator.id`	long	experimental Display name: `Snowflake query execution operator ID` The operator's identifier, unique within a step. Values start at 0.	`0`
`snowflake.query.step.operator.parent_ids`	string[]	experimental Display name: `Snowflake query execution operator parent IDs` Identifiers of the parent operators for this operator, or NULL if this is the final operator in the query plan. ⁷	`['0', '1']`
`snowflake.query.step.operator.stats`	string	experimental Display name: `Snowflake query execution operator statistics` Statistics about the operator (for example, the number of output rows from the operator). ⁸	`{ "input_rows": 64, "output_rows": 64 }`
`snowflake.query.step.operator.time_breakdown`	string	experimental Display name: `Snowflake query execution operator time breakdown` The breakdown of the execution time of the operator: - overall_percentage: The percentage of the total query time spent by this operator, - initialization: Time spent setting up query processing, - processing: Time spent processing the data by the CPU, - synchronization: Time spent synchronizing activities between participating processes, - local_disk_io: Time during which processing was blocked while waiting for local disk access, - remote_disk_io: Time during which processing was blocked while waiting for remote disk access, - network_communication: Time during which processing was waiting for network data transfer. ⁹	`{ "overall_percentage": 50.0,"initialization": 0.5,"processing": 4.0,"synchronization": 0.5,"local_disk_io": 0.2,"remote_disk_io": 0.1,"network_communication": 0.2 }`
`snowflake.query.step.operator.type`	string	experimental Display name: `Snowflake query execution operator type` The type of query operator (for example, TableScan or Filter).	`TableScan`
`snowflake.query.transaction_id`	long	stable Display name: `Snowflake query transaction ID` The transaction ID associated with the query.	`7890123456`
`snowflake.query.with_operator_stats`	boolean	experimental Display name: `Snowflake query execution plan telemetry indicator` Indicates if the query was executed with operator-level statistics enabled.	`true`
`snowflake.release_version`	string	experimental Display name: `Snowflake release version` The release version of Snowflake at the time of query execution.	`5.0`
`snowflake.role.type`	string	stable Display name: `Snowflake role type` The type of role used to execute the query.	`PRIMARY`
`snowflake.schema.id`	long	experimental Display name: `Snowflake schema ID` The unique identifier of the schema involved in the query.	`78901`
`snowflake.secondary_role_stats`	string	experimental Display name: `Snowflake secondary role statistics` Statistics related to secondary roles used during the query execution.	`role_stat1`
`snowflake.warehouse.cluster.number`	long	stable Display name: `Snowflake warehouse cluster number` The cluster number of the warehouse used.	`1`
`snowflake.warehouse.id`	long	experimental Display name: `Snowflake warehouse ID` The unique identifier of the warehouse used.	`12345`
`snowflake.warehouse.size`	string	stable Display name: `Snowflake warehouse size` The size of the warehouse used.	`X-SMALL`
`snowflake.warehouse.type`	string	stable Display name: `Snowflake warehouse type` The type of warehouse used.	`STANDARD`

Fully proprietary; no OTel analog.

Note: this is the SD-catalog attribute name; the actual config path read at runtime is plugins.query_history.obfuscation_mode (no dsoa. prefix) — see 050_f_get_query_history.sql.

Note: this is the SD-catalog attribute name; the actual config path is plugins.query_history.track_ddl_changes (no dsoa. prefix). Not currently wired up to any reader in code — setting this has no runtime effect yet.

⁴

ACCOUNT_USAGE.DATABASES supplies related fields (name, owner, owner_role_type, type, is_transient, lifecycle, retention_time, comment) but these should be populated by a future inventory plugin, not query_history (≈180-min latency + cost). In query_history, snowflake.database.id stays a foreign key only.

⁵

Serialized JSON object stored as string in Grail. Contains estimated query execution times per scale factor. Parse with parseJson() in DQL.

⁶

Serialized JSON object stored as string in Grail. Contains query operator specific attributes (for example, join conditions). Parse with parseJson() in DQL.

⁷

Array of parent operator IDs stored as string[] in Grail. Values are numeric strings.

⁸

Serialized JSON object stored as string in Grail. Contains query operator execution statistics (for example, input_rows, output_rows). Parse with parseJson() in DQL.

⁹

Serialized JSON object stored as string in Grail. Contains query operator time breakdown (for example, overall_percentage). Parse with parseJson() in DQL.

Snowflake spans

Latest Dynatrace
Reference

Span records emitted by Dynatrace Snowflake Observability Agent plugins from Snowflake ACCOUNT_USAGE views.

Query

Fetch the 50 most recent Dynatrace Snowflake Observability Agent event_log spans (traced records from the Snowflake event table).

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| sort timestamp desc
| limit 50

Inspect event_log spans correlated to a Snowflake query, including warehouse and role context.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| filter isNotNull(snowflake.query.id)
| fields timestamp, snowflake.query.id, snowflake.warehouse.name, snowflake.role.name
| sort timestamp desc
| limit 50

Count event_log spans grouped by warehouse.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| filter isNotNull(snowflake.warehouse.name)
| summarize { spans = count() }, by: { snowflake.warehouse.name }
| sort spans desc

Snowflake event log spans

Span records emitted by the Dynatrace Snowflake Observability Agent event_log plugin.

Query

Fetch the 50 most recent Dynatrace Snowflake Observability Agent event_log spans (traced records from the Snowflake event table).

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| sort timestamp desc
| limit 50

Inspect event_log spans correlated to a Snowflake query, including warehouse and role context.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| filter isNotNull(snowflake.query.id)
| fields timestamp, snowflake.query.id, snowflake.warehouse.name, snowflake.role.name
| sort timestamp desc
| limit 50

Count event_log spans grouped by warehouse.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "event_log"
| filter isNotNull(snowflake.warehouse.name)
| summarize { spans = count() }, by: { snowflake.warehouse.name }
| sort spans desc

Dynatrace Snowflake Observability Agent resource fields

Fields present on all Dynatrace Snowflake Observability Agent telemetry records. Synced with config.py RESOURCE_ATTRIBUTES.

Attribute	Type	Description	Examples
`db.system`	string	experimental Display name: `Database system` An identifier for the database management system (DBMS) product being used. See below for a list of well-known identifiers. ¹	`mongodb`; `mysql`
`deployment.environment`	string	resource deprecated Use deployment.environment.name instead. Display name: `Snowflake deployment environment` Deprecated alias for deployment.environment.name. The deployment environment, for example, production, staging, or development. Will be removed in release 1.3.0. ²	`PROD`
`deployment.environment.name`	string	resource stable Display name: `Snowflake deployment environment name` The deployment environment name (OTel semconv canonical field), for example, production, staging, or development. Emitted alongside deployment.environment during the deprecation window. ³	`PROD`
`deployment.environment.tag`	string	resource stable Display name: `Deployment environment tag` Optional tag for the deployment environment in multitenancy mode ⁴	`SA080`
`dsoa.run.context`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution context` The name of the Dynatrace Snowflake Observability Agent context (part of plugin) used to produce the telemetry (logs, traces, metrics, or events). In case of multiple contexts within the same plugin, this helps differentiate between them. If plugin delivers only one context, this field will have the same value as the plugin name. ⁵	`users_all_roles`
`dsoa.run.id`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution unique identifier` Unique ID of each execution of the Dynatrace Snowflake Observability Agent plugin. It can be used to differentiate between telemetry produced between two executions, for example, to calculate the change in the system. ⁶	`4aa7c76c-e98c-4b8b-a5b3-a8a721bbde2d`
`dsoa.run.plugin`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution plugin name` The name of the Dynatrace Snowflake Observability Agent plugin that produced this telemetry. Use to filter all telemetry from a specific plugin (for example, 'query_history', 'warehouse_usage'). Distinct from dsoa.run.context, which may represent a sub-context within a plugin. ⁷	`users`
`host.name`	string	resource experimental Display name: `Host name` The host name as determined on the data source (for instance, OneAgent, extensions or OpenTelemetry). Important: This is not the name of the host entity, which can be modified based on naming rules. ⁸ Tags: `permission`	`ip-10-178-54-32.ec2.internal`
`service.name`	string	resource stable Display name: `OTel service name` The logical name of the service. ⁹	`shoppingcart`
`telemetry.exporter.name`	string	resource experimental Display name: `Telemetry exporter name` The exporter name. ¹⁰	`odin`
`telemetry.exporter.version`	string	resource experimental Display name: `Telemetry exporter version` The full agent/exporter version. ¹¹	`1.285.1.20240101-256988`

Always 'snowflake' for all Dynatrace Snowflake Observability Agent telemetry.

User-configured deployment environment label, for example, 'PROD', 'STG', or 'DEV'. Set via 'core.snowflake.deployment_environment'.

⁴

Optional user-defined tag for grouping Snowflake accounts in multitenancy mode, set via 'core.tag'.

⁵

Identifies the specific sub-context within the plugin (for example, 'query_history', 'users_all_roles').

⁶

Unique identifier for a single Dynatrace Snowflake Observability Agent execution run. Changes on every invocation.

⁷

The Dynatrace Snowflake Observability Agent plugin that produced this telemetry (for example, 'query_history', 'warehouse_usage').

⁸

The Snowflake account hostname (for example, 'xy12345.snowflakecomputing.com'), from 'core.snowflake.host_name'.

⁹

Always the Snowflake account identifier without '.snowflakecomputing.com' suffix (for example, 'myorg-myaccount').

¹⁰

Always 'dynatrace.snowagent' — identifies Dynatrace Snowflake Observability Agent as the telemetry exporter.

¹¹

The installed Dynatrace Snowflake Observability Agent version in <major>.<minor>.<patch>.<build> format.

db.system has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.

Value	Description	Display name
`adabas`	Adabas (Adaptable Database System)	Adabas
`amazon-documentdb`	Amazon DocumentDB	DocumentDB
`aurora-mysql`	Amazon Aurora MySQL	Aurora MySQL
`aurora-postgresql`	Amazon Aurora PostgreSQL	Aurora PostgreSQL
`cache`	InterSystems Caché	InterSystems Caché
`cassandra`	Apache Cassandra	Cassandra
`clickhouse`	ClickHouse	ClickHouse
`cloudscape`	Cloudscape	Cloudscape
`cockroachdb`	CockroachDB	CockroachDB
`coldfusion`	ColdFusion IMQ	ColdFusion IMQ
`cosmosdb`	Microsoft Azure Cosmos DB	Cosmos DB
`couchbase`	Couchbase	Couchbase
`couchdb`	CouchDB	CouchDB
`databricks`	Databricks Data Platform	Databricks Data Platform
`db2`	IBM Db2	IBM Db2
`derby`	Apache Derby	Derby
`dl/i`	IBM DL/I	IBM DL/I
`dynamodb`	Amazon DynamoDB	DynamoDB
`edb`	EnterpriseDB	EnterpriseDB
`elasticsearch`	Elasticsearch	Elasticsearch
`filemaker`	FileMaker	FileMaker
`firebird`	Firebird	Firebird
`firstsql`	FirstSQL	FirstSQL
`geode`	Apache Geode	Geode
`h2`	H2	H2
`hanadb`	SAP HANA	SAP HANA
`hbase`	Apache HBase	HBase
`hive`	Apache Hive	Hive
`hsqldb`	HyperSQL DataBase	HSQLDB
`informix`	Informix	Informix
`ingres`	Ingres	Ingres
`instantdb`	InstantDB	InstantDB
`interbase`	InterBase	InterBase
`keyspaces-cassandra`	Amazon Keyspaces for Apache Cassandra	Keyspaces
`mariadb`	MariaDB	MariaDB
`maxdb`	SAP MaxDB	SAP MaxDB
`memcached`	Memcached	Memcached
`mongodb`	MongoDB	MongoDB
`mssql`	Microsoft SQL Server	SQL Server
`mssqlcompact`	Microsoft SQL Server Compact	SQL Server Compact
`mysql`	MySQL	MySQL
`neo4j`	Neo4j	Neo4j
`neptune`	Amazon Neptune	Neptune
`netezza`	Netezza	Netezza
`opensearch`	OpenSearch	OpenSearch
`oracle`	Oracle Database	Oracle
`other_sql`	Some other SQL database. Fallback only. See notes.	Other SQL
`pervasive`	Pervasive PSQL	Pervasive PSQL
`phoenix`	Apache Phoenix	Apache Phoenix
`pointbase`	PointBase	PointBase
`postgresql`	PostgreSQL	PostgreSQL
`progress`	Progress Database	Progress
`redis`	Redis	Redis
`redshift`	Amazon Redshift	Redshift
`snowflake`	Snowflake Data Platform	Snowflake Data Platform
`spanner`	Cloud Spanner	Cloud Spanner
`sqlite`	SQLite	SQLite
`sybase`	Sybase	Sybase
`teradata`	Teradata	Teradata
`valkey`	Valkey	Valkey
`vertica`	Vertica	Vertica

Snowflake query history spans

Span records emitted by the Dynatrace Snowflake Observability Agent query_history plugin.

Query

Fetch the 50 most recent Dynatrace Snowflake Observability Agent query_history spans (individual Snowflake query executions).

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "query_history"
| sort timestamp desc
| limit 50

Correlate Dynatrace Snowflake Observability Agent query_history spans by trace.id/span.id to inspect the root span and timing for a Snowflake query execution.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "query_history"
| filter isNotNull(trace.id) and isNotNull(span.id)
| fields trace.id, span.id, request.is_root_span, snowflake.query.id, start_time, end_time
| sort start_time desc
| limit 50

Inspect Snowflake query-plan step/operator span events (snowflake.query.step.*) recorded on query_history spans.

fetch spans
| filter db.system == "snowflake"
| filter dsoa.run.plugin == "query_history"
| expand span.events
| filter contains(span.events.name, "snowflake.query.step")
| fields snowflake.query.step.id, snowflake.query.step.operator.type, snowflake.query.step.operator.stats, span.events.timestamp
| sort span.events.timestamp desc
| limit 100

Dynatrace Snowflake Observability Agent resource fields

Fields present on all Dynatrace Snowflake Observability Agent telemetry records. Synced with config.py RESOURCE_ATTRIBUTES.

Attribute	Type	Description	Examples
`db.system`	string	experimental Display name: `Database system` An identifier for the database management system (DBMS) product being used. See below for a list of well-known identifiers. ¹	`mongodb`; `mysql`
`deployment.environment`	string	resource deprecated Use deployment.environment.name instead. Display name: `Snowflake deployment environment` Deprecated alias for deployment.environment.name. The deployment environment, for example, production, staging, or development. Will be removed in release 1.3.0. ²	`PROD`
`deployment.environment.name`	string	resource stable Display name: `Snowflake deployment environment name` The deployment environment name (OTel semconv canonical field), for example, production, staging, or development. Emitted alongside deployment.environment during the deprecation window. ³	`PROD`
`deployment.environment.tag`	string	resource stable Display name: `Deployment environment tag` Optional tag for the deployment environment in multitenancy mode ⁴	`SA080`
`dsoa.run.context`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution context` The name of the Dynatrace Snowflake Observability Agent context (part of plugin) used to produce the telemetry (logs, traces, metrics, or events). In case of multiple contexts within the same plugin, this helps differentiate between them. If plugin delivers only one context, this field will have the same value as the plugin name. ⁵	`users_all_roles`
`dsoa.run.id`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution unique identifier` Unique ID of each execution of the Dynatrace Snowflake Observability Agent plugin. It can be used to differentiate between telemetry produced between two executions, for example, to calculate the change in the system. ⁶	`4aa7c76c-e98c-4b8b-a5b3-a8a721bbde2d`
`dsoa.run.plugin`	string	resource stable Display name: `Dynatrace Snowflake Observability Agent execution plugin name` The name of the Dynatrace Snowflake Observability Agent plugin that produced this telemetry. Use to filter all telemetry from a specific plugin (for example, 'query_history', 'warehouse_usage'). Distinct from dsoa.run.context, which may represent a sub-context within a plugin. ⁷	`users`
`host.name`	string	resource experimental Display name: `Host name` The host name as determined on the data source (for instance, OneAgent, extensions or OpenTelemetry). Important: This is not the name of the host entity, which can be modified based on naming rules. ⁸ Tags: `permission`	`ip-10-178-54-32.ec2.internal`
`service.name`	string	resource stable Display name: `OTel service name` The logical name of the service. ⁹	`shoppingcart`
`telemetry.exporter.name`	string	resource experimental Display name: `Telemetry exporter name` The exporter name. ¹⁰	`odin`
`telemetry.exporter.version`	string	resource experimental Display name: `Telemetry exporter version` The full agent/exporter version. ¹¹	`1.285.1.20240101-256988`

Always 'snowflake' for all Dynatrace Snowflake Observability Agent telemetry.

User-configured deployment environment label, for example, 'PROD', 'STG', or 'DEV'. Set via 'core.snowflake.deployment_environment'.

⁴

Optional user-defined tag for grouping Snowflake accounts in multitenancy mode, set via 'core.tag'.

⁵

Identifies the specific sub-context within the plugin (for example, 'query_history', 'users_all_roles').

⁶

Unique identifier for a single Dynatrace Snowflake Observability Agent execution run. Changes on every invocation.

⁷

The Dynatrace Snowflake Observability Agent plugin that produced this telemetry (for example, 'query_history', 'warehouse_usage').

⁸

The Snowflake account hostname (for example, 'xy12345.snowflakecomputing.com'), from 'core.snowflake.host_name'.

⁹

Always the Snowflake account identifier without '.snowflakecomputing.com' suffix (for example, 'myorg-myaccount').

¹⁰

Always 'dynatrace.snowagent' — identifies Dynatrace Snowflake Observability Agent as the telemetry exporter.

¹¹

The installed Dynatrace Snowflake Observability Agent version in <major>.<minor>.<patch>.<build> format.

db.system has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.

Value	Description	Display name
`adabas`	Adabas (Adaptable Database System)	Adabas
`amazon-documentdb`	Amazon DocumentDB	DocumentDB
`aurora-mysql`	Amazon Aurora MySQL	Aurora MySQL
`aurora-postgresql`	Amazon Aurora PostgreSQL	Aurora PostgreSQL
`cache`	InterSystems Caché	InterSystems Caché
`cassandra`	Apache Cassandra	Cassandra
`clickhouse`	ClickHouse	ClickHouse
`cloudscape`	Cloudscape	Cloudscape
`cockroachdb`	CockroachDB	CockroachDB
`coldfusion`	ColdFusion IMQ	ColdFusion IMQ
`cosmosdb`	Microsoft Azure Cosmos DB	Cosmos DB
`couchbase`	Couchbase	Couchbase
`couchdb`	CouchDB	CouchDB
`databricks`	Databricks Data Platform	Databricks Data Platform
`db2`	IBM Db2	IBM Db2
`derby`	Apache Derby	Derby
`dl/i`	IBM DL/I	IBM DL/I
`dynamodb`	Amazon DynamoDB	DynamoDB
`edb`	EnterpriseDB	EnterpriseDB
`elasticsearch`	Elasticsearch	Elasticsearch
`filemaker`	FileMaker	FileMaker
`firebird`	Firebird	Firebird
`firstsql`	FirstSQL	FirstSQL
`geode`	Apache Geode	Geode
`h2`	H2	H2
`hanadb`	SAP HANA	SAP HANA
`hbase`	Apache HBase	HBase
`hive`	Apache Hive	Hive
`hsqldb`	HyperSQL DataBase	HSQLDB
`informix`	Informix	Informix
`ingres`	Ingres	Ingres
`instantdb`	InstantDB	InstantDB
`interbase`	InterBase	InterBase
`keyspaces-cassandra`	Amazon Keyspaces for Apache Cassandra	Keyspaces
`mariadb`	MariaDB	MariaDB
`maxdb`	SAP MaxDB	SAP MaxDB
`memcached`	Memcached	Memcached
`mongodb`	MongoDB	MongoDB
`mssql`	Microsoft SQL Server	SQL Server
`mssqlcompact`	Microsoft SQL Server Compact	SQL Server Compact
`mysql`	MySQL	MySQL
`neo4j`	Neo4j	Neo4j
`neptune`	Amazon Neptune	Neptune
`netezza`	Netezza	Netezza
`opensearch`	OpenSearch	OpenSearch
`oracle`	Oracle Database	Oracle
`other_sql`	Some other SQL database. Fallback only. See notes.	Other SQL
`pervasive`	Pervasive PSQL	Pervasive PSQL
`phoenix`	Apache Phoenix	Apache Phoenix
`pointbase`	PointBase	PointBase
`postgresql`	PostgreSQL	PostgreSQL
`progress`	Progress Database	Progress
`redis`	Redis	Redis
`redshift`	Amazon Redshift	Redshift
`snowflake`	Snowflake Data Platform	Snowflake Data Platform
`spanner`	Cloud Spanner	Cloud Spanner
`sqlite`	SQLite	SQLite
`sybase`	Sybase	Sybase
`teradata`	Teradata	Teradata
`valkey`	Valkey	Valkey
`vertica`	Vertica	Vertica

Query history span fields

Attribute fields for query history spans.

Attribute	Type	Description	Examples
`db.snowflake.tables`	string[]	stable Display name: `Snowflake tables used in query` The tables involved in the query.	`['users', 'orders']`
`db.snowflake.views`	string[]	stable Display name: `Snowflake views used in query` The views involved in the query. ¹	`['user_view']`
`dsoa.debug.span.events.added`	long	stable Display name: `Dynatrace Snowflake Observability Agent debug span events added` Internal debug field indicating the number of span events successfully added to the given span.	`5`
`dsoa.debug.span.events.failed`	long	stable Display name: `Dynatrace Snowflake Observability Agent debug span events failed` Internal debug field indicating the number of span events that failed to be added to the given span.	`1`
`dsoa.plugins.query_history.obfuscation_mode`	string	experimental Display name: `Dynatrace Snowflake Observability Agent query history obfuscation mode` Configuration key controlling query text obfuscation mode applied to `db.query.text` and `snowflake.error.message`. ²	`none`
`dsoa.plugins.query_history.track_ddl_changes`	boolean	experimental Display name: `Dynatrace Snowflake Observability Agent query history DDL change tracking indicator` EXPERIMENTAL. When `true`, the plugin surfaces DDL change attribution attributes (`snowflake.object.type`, `.id`, `.name`, `snowflake.object.ddl.operation`, `snowflake.object.ddl.properties`) on `query_history` events whose `ACCESS_HISTORY` row carries an `OBJECT_MODIFIED_BY_DDL` payload. Covers database-object DDL only (tables, views, schemas, procedures). Warehouse and resource-monitor DDL does not populate `OBJECT_MODIFIED_BY_DDL` and is not affected by this setting — use `db.operation.name` for warehouse change detection. Default `false` preserves backward-compatible behavior. May be refactored into a dedicated plugin in a future release. ³	`false`
`snowflake.cluster_number`	long	experimental Display name: `Snowflake warehouse cluster number` The warehouse cluster number associated with the query.	`1`
`snowflake.cost_attribution.period_end`	long	experimental Display name: `Snowflake cost attribution period end` End of the cost attribution summary window.	`1730844667000000000`
`snowflake.cost_attribution.period_start`	long	experimental Display name: `Snowflake cost attribution period start` Start of the cost attribution summary window.	`1730841067000000000`
`snowflake.database.id`	long	stable Display name: `Snowflake database ID` The unique identifier of the database involved in the query. ⁴	`123456`
`snowflake.object.ddl.operation`	string	stable Display name: `Snowflake DDL operation` The SQL keyword that specifies the operation on the table, view, or column.	`REPLACE`
`snowflake.object.type`	string	stable Display name: `Snowflake object type` The domain of the object defined or modified by the DDL operation.	`Table`
`snowflake.query.accel_est.estimated_query_times`	string	stable Display name: `Snowflake query acceleration estimated execution times` Object that contains the estimated query execution time in seconds for different query acceleration scale factors. If the status for the query is not eligible for query acceleration, this object is empty. ⁵	`{ "scaleFactor1": 10, "scaleFactor2": 5 }`
`snowflake.query.accel_est.status`	string	stable Display name: `Snowflake query acceleration status` Indicates whether the query is eligible to benefit from the query acceleration service.	`eligible`
`snowflake.query.accel_est.upper_limit_scale_factor`	long	stable Display name: `Snowflake query acceleration upper limit scale factor` Number of the highest query acceleration scale factor in the estimatedQueryTimes object. If the status for the query is not eligible for query acceleration, this field is set to 0.	`2`
`snowflake.query.data_transfer.inbound.cloud`	string	stable Display name: `Snowflake inbound data transfer cloud` The cloud provider from which data was transferred inbound.	`AWS`
`snowflake.query.data_transfer.inbound.region`	string	stable Display name: `Snowflake inbound data transfer region` The region from which data was transferred inbound.	`us-west-2`
`snowflake.query.data_transfer.outbound.cloud`	string	stable Display name: `Snowflake outbound data transfer cloud` The cloud provider to which data was transferred outbound.	`AWS`
`snowflake.query.data_transfer.outbound.region`	string	stable Display name: `Snowflake outbound data transfer region` The region to which data was transferred outbound.	`us-west-2`
`snowflake.query.is_client_generated`	boolean	stable Display name: `Snowflake client generated query indicator` Indicates if the statement was generated by the client.	`true`
`snowflake.query.retry_cause`	string	stable Display name: `Snowflake query retry cause` The cause for retrying the query, if applicable.	`Network issue`
`snowflake.query.step.id`	long	experimental Display name: `Snowflake query execution step ID` Identifier of the step in the query execution plan. operator_id values are unique within a step, not across the full query.	`1`
`snowflake.query.step.operator.attributes`	string	experimental Display name: `Snowflake query execution operator attributes` Information about the operator, depending on the operator type. ⁶	`{ "equality_join_condition": "(T4.C = T1.C)", "join_type": "INNER" }`
`snowflake.query.step.operator.id`	long	experimental Display name: `Snowflake query execution operator ID` The operator's identifier, unique within a step. Values start at 0.	`0`
`snowflake.query.step.operator.parent_ids`	string[]	experimental Display name: `Snowflake query execution operator parent IDs` Identifiers of the parent operators for this operator, or NULL if this is the final operator in the query plan. ⁷	`['0', '1']`
`snowflake.query.step.operator.stats`	string	experimental Display name: `Snowflake query execution operator statistics` Statistics about the operator (for example, the number of output rows from the operator). ⁸	`{ "input_rows": 64, "output_rows": 64 }`
`snowflake.query.step.operator.time_breakdown`	string	experimental Display name: `Snowflake query execution operator time breakdown` The breakdown of the execution time of the operator: - overall_percentage: The percentage of the total query time spent by this operator, - initialization: Time spent setting up query processing, - processing: Time spent processing the data by the CPU, - synchronization: Time spent synchronizing activities between participating processes, - local_disk_io: Time during which processing was blocked while waiting for local disk access, - remote_disk_io: Time during which processing was blocked while waiting for remote disk access, - network_communication: Time during which processing was waiting for network data transfer. ⁹	`{ "overall_percentage": 50.0,"initialization": 0.5,"processing": 4.0,"synchronization": 0.5,"local_disk_io": 0.2,"remote_disk_io": 0.1,"network_communication": 0.2 }`
`snowflake.query.step.operator.type`	string	experimental Display name: `Snowflake query execution operator type` The type of query operator (for example, TableScan or Filter).	`TableScan`
`snowflake.query.transaction_id`	long	stable Display name: `Snowflake query transaction ID` The transaction ID associated with the query.	`7890123456`
`snowflake.query.with_operator_stats`	boolean	experimental Display name: `Snowflake query execution plan telemetry indicator` Indicates if the query was executed with operator-level statistics enabled.	`true`
`snowflake.release_version`	string	experimental Display name: `Snowflake release version` The release version of Snowflake at the time of query execution.	`5.0`
`snowflake.role.type`	string	stable Display name: `Snowflake role type` The type of role used to execute the query.	`PRIMARY`
`snowflake.schema.id`	long	experimental Display name: `Snowflake schema ID` The unique identifier of the schema involved in the query.	`78901`
`snowflake.secondary_role_stats`	string	experimental Display name: `Snowflake secondary role statistics` Statistics related to secondary roles used during the query execution.	`role_stat1`
`snowflake.warehouse.cluster.number`	long	stable Display name: `Snowflake warehouse cluster number` The cluster number of the warehouse used.	`1`
`snowflake.warehouse.id`	long	experimental Display name: `Snowflake warehouse ID` The unique identifier of the warehouse used.	`12345`
`snowflake.warehouse.size`	string	stable Display name: `Snowflake warehouse size` The size of the warehouse used.	`X-SMALL`
`snowflake.warehouse.type`	string	stable Display name: `Snowflake warehouse type` The type of warehouse used.	`STANDARD`

Fully proprietary; no OTel analog.

Note: this is the SD-catalog attribute name; the actual config path read at runtime is plugins.query_history.obfuscation_mode (no dsoa. prefix) — see 050_f_get_query_history.sql.

⁴

⁵

Serialized JSON object stored as string in Grail. Contains estimated query execution times per scale factor. Parse with parseJson() in DQL.

⁶

Serialized JSON object stored as string in Grail. Contains query operator specific attributes (for example, join conditions). Parse with parseJson() in DQL.

⁷

Array of parent operator IDs stored as string[] in Grail. Values are numeric strings.

⁸

Serialized JSON object stored as string in Grail. Contains query operator execution statistics (for example, input_rows, output_rows). Parse with parseJson() in DQL.

⁹

Serialized JSON object stored as string in Grail. Contains query operator time breakdown (for example, overall_percentage). Parse with parseJson() in DQL.