Skip to main content

Running-as fields

Reported when the process ran under a different identity from the actor.

FieldTypeUnitMeaning
sparklogs.running_as.idstringThe execution principal's stable join key.
sparklogs.running_as.namestringThe execution principal's human-readable name.
sparklogs.running_as.typestringThe identifier scheme used by id or name.
sparklogs.running_as.kindstringThe kind of principal.
sparklogs.running_as.domainstringThe execution principal's authenticating or owning domain.