[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-cockroachdb-configuring-log-export":3,"mdc-ymu6sm-key":39,"related-org-cockroachdb-configuring-log-export":2516,"related-repo-cockroachdb-configuring-log-export":2678},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":25,"repoUrl":26,"updatedAt":27,"license":28,"forks":29,"topics":30,"repo":34,"sourceUrl":37,"mdContent":38},"configuring-log-export","configure log export for CockroachDB","Configures log and metric export for CockroachDB Cloud clusters to external monitoring services including AWS CloudWatch, GCP Cloud Logging, and Datadog. Use when setting up log export for audit compliance, configuring metric export for monitoring, or troubleshooting log delivery issues.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"cockroachdb","CockroachDB","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fcockroachdb.png",[12,16,19,22],{"name":13,"slug":14,"type":15},"Observability","observability","tag",{"name":17,"slug":18,"type":15},"Monitoring","monitoring",{"name":20,"slug":21,"type":15},"Datadog","datadog",{"name":23,"slug":24,"type":15},"Audit","audit",3,"https:\u002F\u002Fgithub.com\u002Fcockroachdb\u002Fclaude-plugin","2026-07-12T07:56:53.732369",null,2,[31,32,8,33],"claude","cockroach-cloud","developer-tools",{"repoUrl":26,"stars":25,"forks":29,"topics":35,"description":36},[31,32,8,33],"CockroachDB development plugin for Claude","https:\u002F\u002Fgithub.com\u002Fcockroachdb\u002Fclaude-plugin\u002Ftree\u002FHEAD\u002Fskills\u002Fcockroachdb-security-and-governance\u002Fconfiguring-log-export","---\nname: configuring-log-export\ndescription: Configures log and metric export for CockroachDB Cloud clusters to external monitoring services including AWS CloudWatch, GCP Cloud Logging, and Datadog. Use when setting up log export for audit compliance, configuring metric export for monitoring, or troubleshooting log delivery issues.\ncompatibility: Requires CockroachDB Cloud Advanced plan. Requires ccloud CLI with Cluster Admin role and cloud provider IAM configuration.\nmetadata:\n author: cockroachdb\n version: \"1.0\"\n---\n\n# Configuring Log Export\n\nConfigures log and metric export for CockroachDB Cloud clusters to deliver cluster logs, audit logs, and performance metrics to external monitoring services. Supports AWS CloudWatch, GCP Cloud Logging, and third-party integrations like Datadog.\n\n## When to Use This Skill\n\n- Setting up log export to AWS CloudWatch or GCP Cloud Logging\n- Configuring metric export to CloudWatch or Datadog\n- Verifying that SQL audit logs are being exported to an external sink\n- Troubleshooting log export errors or missing logs\n- Estimating CloudWatch or logging service costs for CockroachDB log volume\n- Configuring log export via Terraform\n\n## Prerequisites\n\n- **CockroachDB Cloud Advanced plan** — Log export is not available on Basic or Standard plans\n- **ccloud CLI** authenticated with Cluster Admin role\n- **Cloud provider setup:**\n - **AWS:** CloudWatch Logs group created, IAM role granting CockroachDB Cloud cross-account access\n - **GCP:** Cloud Logging API enabled, service account with Logs Writer role\n- **Cluster ID:** Available from `ccloud cluster list`\n\n**Verify access:**\n```bash\nccloud auth whoami\nccloud cluster info \u003Ccluster-name> -o json\n# Look for \"plan\": \"ADVANCED\"\n```\n\n## Configuration Decisions\n\nBefore proceeding, determine which export destinations apply to the user's environment. Ask which options are relevant, then follow only the corresponding sections below.\n\n**Decision 1 — Log export destination:**\n- **AWS CloudWatch:** Use when the cluster runs on AWS and logs should go to CloudWatch Logs. Requires IAM cross-account role setup.\n- **GCP Cloud Logging:** Use when the cluster runs on GCP. Requires a service account with Logs Writer role.\n\n**Decision 2 — Metric export destination:**\n- **CloudWatch:** Use when metrics should go to AWS CloudWatch. Requires IAM role with `cloudwatch:PutMetricData` permission.\n- **Datadog:** Use when metrics should go to Datadog. Requires a Datadog API key and site.\n- **Skip:** No metric export needed at this time.\n\n## Steps\n\n### 1. Check Current Log Export Configuration\n\n```bash\n# Check if log export is currently configured\nccloud cluster info \u003Ccluster-name> -o json\n# Look for \"log_export_config\" in the output\n```\n\n### 2. Set Up Log Export to AWS CloudWatch\n\n> Follow this section only if the user selected **AWS CloudWatch** in Decision 1. Skip to Step 3 if using GCP Cloud Logging.\n\n#### 2.1 Create a CloudWatch Log Group\n\n```bash\n# Create a log group in AWS (if it doesn't exist)\naws logs create-log-group \\\n --log-group-name cockroachdb-\u003Ccluster-name> \\\n --region \u003Caws-region>\n\n# Set retention policy (recommended)\naws logs put-retention-policy \\\n --log-group-name cockroachdb-\u003Ccluster-name> \\\n --retention-in-days 90 \\\n --region \u003Caws-region>\n```\n\n#### 2.2 Create an IAM Role for CockroachDB Cloud\n\nSee [cloud provider setup reference](references\u002Fcloud-provider-setup.md) for the complete IAM role policy.\n\nThe IAM role must:\n- Trust the CockroachDB Cloud AWS account as an allowed principal\n- Grant `logs:CreateLogStream`, `logs:PutLogEvents`, `logs:DescribeLogGroups`, `logs:DescribeLogStreams` permissions\n- Be scoped to the specific log group\n\n#### 2.3 Enable Log Export\n\n```bash\n# Enable log export to CloudWatch\nccloud cluster log-export create \u003Ccluster-id> \\\n --log-group-name cockroachdb-\u003Ccluster-name> \\\n --auth-principal \u003Ciam-role-arn> \\\n --type AWS_CLOUDWATCH \\\n --region \u003Caws-region>\n```\n\n### 3. Set Up Log Export to GCP Cloud Logging\n\n> Follow this section only if the user selected **GCP Cloud Logging** in Decision 1. Skip if using AWS CloudWatch.\n\n#### 3.1 Enable Cloud Logging API\n\n```bash\ngcloud services enable logging.googleapis.com\n```\n\n#### 3.2 Grant CockroachDB Cloud Service Account Access\n\n```bash\n# Get the CockroachDB Cloud service account from ccloud cluster info\n# Grant Logs Writer role\ngcloud projects add-iam-policy-binding \u003Cgcp-project-id> \\\n --member=\"serviceAccount:\u003Ccockroachdb-service-account>\" \\\n --role=\"roles\u002Flogging.logWriter\"\n```\n\n#### 3.3 Enable Log Export\n\n```bash\nccloud cluster log-export create \u003Ccluster-id> \\\n --auth-principal \u003Cgcp-project-id> \\\n --type GCP_CLOUD_LOGGING\n```\n\n### 4. Configure Metric Export\n\n> Skip this section if the user selected **Skip** in Decision 2. Follow only the relevant subsection (4.1 or 4.2) based on the selected metric export destination.\n\nMetric export sends CockroachDB performance metrics to CloudWatch or Datadog.\n\n#### 4.1 Metric Export to CloudWatch\n\n```bash\nccloud cluster metric-export create cloudwatch \u003Ccluster-id> \\\n --role-arn \u003Ciam-role-arn> \\\n --target-region \u003Caws-region>\n```\n\nThe IAM role for metric export needs `cloudwatch:PutMetricData` permission.\n\n#### 4.2 Metric Export to Datadog\n\n```bash\nccloud cluster metric-export create datadog \u003Ccluster-id> \\\n --api-key \u003Cdatadog-api-key> \\\n --site \u003Cdatadog-site>\n```\n\n**Datadog site values:** `datadoghq.com` (US), `datadoghq.eu` (EU), `us3.datadoghq.com` (US3), `us5.datadoghq.com` (US5)\n\n### 5. Verify Log and Metric Export\n\n```bash\n# Check log export status\nccloud cluster log-export list \u003Ccluster-id> -o json\n# Status should be ENABLED\n\n# Check metric export status\nccloud cluster metric-export list \u003Ccluster-id> -o json\n```\n\n**Verify log delivery in CloudWatch:**\n```bash\n# Check for recent log streams\naws logs describe-log-streams \\\n --log-group-name cockroachdb-\u003Ccluster-name> \\\n --order-by LastEventTime \\\n --descending \\\n --limit 5 \\\n --region \u003Caws-region>\n\n# Tail recent log events\naws logs tail cockroachdb-\u003Ccluster-name> \\\n --since 1h \\\n --region \u003Caws-region>\n```\n\n**Verify audit logs are being exported:**\n\nAudit logs are included in the log export if SQL audit logging is enabled on the cluster. To confirm:\n\n```sql\n-- Check audit logging is enabled\nSHOW CLUSTER SETTING sql.log.admin_audit.enabled;\nSHOW CLUSTER SETTING sql.log.user_audit;\n```\n\nIf audit logging is enabled but audit events are not appearing in CloudWatch, check:\n1. Log export status is ENABLED\n2. The IAM role has correct permissions\n3. Log group name matches the configured export target\n4. Allow 5-10 minutes for initial log delivery\n\n### 6. Configure Log Export via Terraform\n\n```hcl\nresource \"cockroach_log_export_config\" \"main\" {\n id = cockroach_cluster.main.id\n auth_principal = \"\u003Ciam-role-arn>\"\n log_name = \"cockroachdb-${cockroach_cluster.main.name}\"\n type = \"AWS_CLOUDWATCH\"\n region = \"\u003Caws-region>\"\n}\n\nresource \"cockroach_metric_export_cloudwatch_config\" \"main\" {\n id = cockroach_cluster.main.id\n role_arn = \"\u003Ciam-role-arn>\"\n target_region = \"\u003Caws-region>\"\n}\n```\n\n**Known Terraform issue:** Creating a cluster with log export and CMEK in the same `terraform apply` can cause a race condition. Apply the cluster first, then add log export and CMEK configurations in a subsequent apply.\n\n## Safety Considerations\n\n| Impact Type | Severity | Recommendation |\n|-------------|----------|----------------|\n| Log export enabling | Low | No impact on cluster operation |\n| Log export disabling | Low | Stops log delivery but does not affect cluster |\n| IAM misconfiguration | Medium | Log export will fail silently; monitor for delivery gaps |\n| Cost impact | Medium | High-volume clusters can generate significant CloudWatch\u002Flogging costs |\n| Terraform race condition | Medium | Apply cluster creation before log\u002FCMEK config |\n\n**Cost planning:**\n- CockroachDB Cloud can generate 1-10 GB of logs per day per node depending on query volume and audit settings\n- CloudWatch Logs pricing: ~$0.50\u002FGB ingestion + $0.03\u002FGB storage\u002Fmonth (varies by region)\n- Enable log retention policies to control storage costs\n- Audit logging significantly increases log volume — plan accordingly\n\n**Do not:**\n- Delete the CloudWatch log group while log export is active (will cause delivery errors)\n- Revoke IAM permissions without disabling log export first\n- Enable cluster-wide SQL audit logging without considering the log volume increase\n\n## Rollback\n\n```bash\n# Disable log export\nccloud cluster log-export delete \u003Ccluster-id>\n\n# Disable metric export\nccloud cluster metric-export delete cloudwatch \u003Ccluster-id>\nccloud cluster metric-export delete datadog \u003Ccluster-id>\n```\n\nLog export can be re-enabled at any time with the same or different configuration. Historical logs are not re-sent — only new logs are exported after re-enabling.\n\n## References\n\n**Skill references:**\n- [Cloud provider IAM setup](references\u002Fcloud-provider-setup.md)\n\n**Related skills:**\n- [configuring-audit-logging](..\u002Fconfiguring-audit-logging\u002FSKILL.md) — Enable SQL audit logging (must be enabled for audit logs to appear in export)\n- [auditing-cloud-cluster-security](..\u002Fauditing-cloud-cluster-security\u002FSKILL.md) — Run a full security posture audit\n\n**Official CockroachDB Documentation:**\n- [Export Logs From a CockroachDB Cloud Cluster](https:\u002F\u002Fwww.cockroachlabs.com\u002Fdocs\u002Fcockroachcloud\u002Fexport-logs.html)\n- [Export Metrics From a CockroachDB Cloud Cluster](https:\u002F\u002Fwww.cockroachlabs.com\u002Fdocs\u002Fcockroachcloud\u002Fexport-metrics.html)\n- [Cloud API — Log Export](https:\u002F\u002Fwww.cockroachlabs.com\u002Fdocs\u002Fcockroachcloud\u002Fcloud-api.html)\n",{"data":40,"body":44},{"name":4,"description":6,"compatibility":41,"metadata":42},"Requires CockroachDB Cloud Advanced plan. Requires ccloud CLI with Cluster Admin role and cloud provider IAM configuration.",{"author":8,"version":43},"1.0",{"type":45,"children":46},"root",[47,55,61,68,103,109,181,189,281,287,292,300,323,331,372,378,385,447,453,469,476,691,697,711,716,764,770,928,934,948,954,984,990,1099,1105,1190,1196,1211,1216,1222,1326,1337,1343,1449,1491,1497,1622,1630,1862,1870,1875,1908,1913,1937,1943,2054,2072,2078,2198,2206,2229,2237,2255,2261,2405,2410,2416,2424,2435,2443,2468,2476,2510],{"type":48,"tag":49,"props":50,"children":51},"element","h1",{"id":4},[52],{"type":53,"value":54},"text","Configuring Log Export",{"type":48,"tag":56,"props":57,"children":58},"p",{},[59],{"type":53,"value":60},"Configures log and metric export for CockroachDB Cloud clusters to deliver cluster logs, audit logs, and performance metrics to external monitoring services. Supports AWS CloudWatch, GCP Cloud Logging, and third-party integrations like Datadog.",{"type":48,"tag":62,"props":63,"children":65},"h2",{"id":64},"when-to-use-this-skill",[66],{"type":53,"value":67},"When to Use This Skill",{"type":48,"tag":69,"props":70,"children":71},"ul",{},[72,78,83,88,93,98],{"type":48,"tag":73,"props":74,"children":75},"li",{},[76],{"type":53,"value":77},"Setting up log export to AWS CloudWatch or GCP Cloud Logging",{"type":48,"tag":73,"props":79,"children":80},{},[81],{"type":53,"value":82},"Configuring metric export to CloudWatch or Datadog",{"type":48,"tag":73,"props":84,"children":85},{},[86],{"type":53,"value":87},"Verifying that SQL audit logs are being exported to an external sink",{"type":48,"tag":73,"props":89,"children":90},{},[91],{"type":53,"value":92},"Troubleshooting log export errors or missing logs",{"type":48,"tag":73,"props":94,"children":95},{},[96],{"type":53,"value":97},"Estimating CloudWatch or logging service costs for CockroachDB log volume",{"type":48,"tag":73,"props":99,"children":100},{},[101],{"type":53,"value":102},"Configuring log export via Terraform",{"type":48,"tag":62,"props":104,"children":106},{"id":105},"prerequisites",[107],{"type":53,"value":108},"Prerequisites",{"type":48,"tag":69,"props":110,"children":111},{},[112,123,133,164],{"type":48,"tag":73,"props":113,"children":114},{},[115,121],{"type":48,"tag":116,"props":117,"children":118},"strong",{},[119],{"type":53,"value":120},"CockroachDB Cloud Advanced plan",{"type":53,"value":122}," — Log export is not available on Basic or Standard plans",{"type":48,"tag":73,"props":124,"children":125},{},[126,131],{"type":48,"tag":116,"props":127,"children":128},{},[129],{"type":53,"value":130},"ccloud CLI",{"type":53,"value":132}," authenticated with Cluster Admin role",{"type":48,"tag":73,"props":134,"children":135},{},[136,141],{"type":48,"tag":116,"props":137,"children":138},{},[139],{"type":53,"value":140},"Cloud provider setup:",{"type":48,"tag":69,"props":142,"children":143},{},[144,154],{"type":48,"tag":73,"props":145,"children":146},{},[147,152],{"type":48,"tag":116,"props":148,"children":149},{},[150],{"type":53,"value":151},"AWS:",{"type":53,"value":153}," CloudWatch Logs group created, IAM role granting CockroachDB Cloud cross-account access",{"type":48,"tag":73,"props":155,"children":156},{},[157,162],{"type":48,"tag":116,"props":158,"children":159},{},[160],{"type":53,"value":161},"GCP:",{"type":53,"value":163}," Cloud Logging API enabled, service account with Logs Writer role",{"type":48,"tag":73,"props":165,"children":166},{},[167,172,174],{"type":48,"tag":116,"props":168,"children":169},{},[170],{"type":53,"value":171},"Cluster ID:",{"type":53,"value":173}," Available from ",{"type":48,"tag":175,"props":176,"children":178},"code",{"className":177},[],[179],{"type":53,"value":180},"ccloud cluster list",{"type":48,"tag":56,"props":182,"children":183},{},[184],{"type":48,"tag":116,"props":185,"children":186},{},[187],{"type":53,"value":188},"Verify access:",{"type":48,"tag":190,"props":191,"children":196},"pre",{"className":192,"code":193,"language":194,"meta":195,"style":195},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","ccloud auth whoami\nccloud cluster info \u003Ccluster-name> -o json\n# Look for \"plan\": \"ADVANCED\"\n","bash","",[197],{"type":48,"tag":175,"props":198,"children":199},{"__ignoreMap":195},[200,223,272],{"type":48,"tag":201,"props":202,"children":205},"span",{"class":203,"line":204},"line",1,[206,212,218],{"type":48,"tag":201,"props":207,"children":209},{"style":208},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[210],{"type":53,"value":211},"ccloud",{"type":48,"tag":201,"props":213,"children":215},{"style":214},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[216],{"type":53,"value":217}," auth",{"type":48,"tag":201,"props":219,"children":220},{"style":214},[221],{"type":53,"value":222}," whoami\n",{"type":48,"tag":201,"props":224,"children":225},{"class":203,"line":29},[226,230,235,240,246,251,257,262,267],{"type":48,"tag":201,"props":227,"children":228},{"style":208},[229],{"type":53,"value":211},{"type":48,"tag":201,"props":231,"children":232},{"style":214},[233],{"type":53,"value":234}," cluster",{"type":48,"tag":201,"props":236,"children":237},{"style":214},[238],{"type":53,"value":239}," info",{"type":48,"tag":201,"props":241,"children":243},{"style":242},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[244],{"type":53,"value":245}," \u003C",{"type":48,"tag":201,"props":247,"children":248},{"style":214},[249],{"type":53,"value":250},"cluster-nam",{"type":48,"tag":201,"props":252,"children":254},{"style":253},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[255],{"type":53,"value":256},"e",{"type":48,"tag":201,"props":258,"children":259},{"style":242},[260],{"type":53,"value":261},">",{"type":48,"tag":201,"props":263,"children":264},{"style":214},[265],{"type":53,"value":266}," -o",{"type":48,"tag":201,"props":268,"children":269},{"style":214},[270],{"type":53,"value":271}," json\n",{"type":48,"tag":201,"props":273,"children":274},{"class":203,"line":25},[275],{"type":48,"tag":201,"props":276,"children":278},{"style":277},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[279],{"type":53,"value":280},"# Look for \"plan\": \"ADVANCED\"\n",{"type":48,"tag":62,"props":282,"children":284},{"id":283},"configuration-decisions",[285],{"type":53,"value":286},"Configuration Decisions",{"type":48,"tag":56,"props":288,"children":289},{},[290],{"type":53,"value":291},"Before proceeding, determine which export destinations apply to the user's environment. Ask which options are relevant, then follow only the corresponding sections below.",{"type":48,"tag":56,"props":293,"children":294},{},[295],{"type":48,"tag":116,"props":296,"children":297},{},[298],{"type":53,"value":299},"Decision 1 — Log export destination:",{"type":48,"tag":69,"props":301,"children":302},{},[303,313],{"type":48,"tag":73,"props":304,"children":305},{},[306,311],{"type":48,"tag":116,"props":307,"children":308},{},[309],{"type":53,"value":310},"AWS CloudWatch:",{"type":53,"value":312}," Use when the cluster runs on AWS and logs should go to CloudWatch Logs. Requires IAM cross-account role setup.",{"type":48,"tag":73,"props":314,"children":315},{},[316,321],{"type":48,"tag":116,"props":317,"children":318},{},[319],{"type":53,"value":320},"GCP Cloud Logging:",{"type":53,"value":322}," Use when the cluster runs on GCP. Requires a service account with Logs Writer role.",{"type":48,"tag":56,"props":324,"children":325},{},[326],{"type":48,"tag":116,"props":327,"children":328},{},[329],{"type":53,"value":330},"Decision 2 — Metric export destination:",{"type":48,"tag":69,"props":332,"children":333},{},[334,352,362],{"type":48,"tag":73,"props":335,"children":336},{},[337,342,344,350],{"type":48,"tag":116,"props":338,"children":339},{},[340],{"type":53,"value":341},"CloudWatch:",{"type":53,"value":343}," Use when metrics should go to AWS CloudWatch. Requires IAM role with ",{"type":48,"tag":175,"props":345,"children":347},{"className":346},[],[348],{"type":53,"value":349},"cloudwatch:PutMetricData",{"type":53,"value":351}," permission.",{"type":48,"tag":73,"props":353,"children":354},{},[355,360],{"type":48,"tag":116,"props":356,"children":357},{},[358],{"type":53,"value":359},"Datadog:",{"type":53,"value":361}," Use when metrics should go to Datadog. Requires a Datadog API key and site.",{"type":48,"tag":73,"props":363,"children":364},{},[365,370],{"type":48,"tag":116,"props":366,"children":367},{},[368],{"type":53,"value":369},"Skip:",{"type":53,"value":371}," No metric export needed at this time.",{"type":48,"tag":62,"props":373,"children":375},{"id":374},"steps",[376],{"type":53,"value":377},"Steps",{"type":48,"tag":379,"props":380,"children":382},"h3",{"id":381},"_1-check-current-log-export-configuration",[383],{"type":53,"value":384},"1. Check Current Log Export Configuration",{"type":48,"tag":190,"props":386,"children":388},{"className":192,"code":387,"language":194,"meta":195,"style":195},"# Check if log export is currently configured\nccloud cluster info \u003Ccluster-name> -o json\n# Look for \"log_export_config\" in the output\n",[389],{"type":48,"tag":175,"props":390,"children":391},{"__ignoreMap":195},[392,400,439],{"type":48,"tag":201,"props":393,"children":394},{"class":203,"line":204},[395],{"type":48,"tag":201,"props":396,"children":397},{"style":277},[398],{"type":53,"value":399},"# Check if log export is currently configured\n",{"type":48,"tag":201,"props":401,"children":402},{"class":203,"line":29},[403,407,411,415,419,423,427,431,435],{"type":48,"tag":201,"props":404,"children":405},{"style":208},[406],{"type":53,"value":211},{"type":48,"tag":201,"props":408,"children":409},{"style":214},[410],{"type":53,"value":234},{"type":48,"tag":201,"props":412,"children":413},{"style":214},[414],{"type":53,"value":239},{"type":48,"tag":201,"props":416,"children":417},{"style":242},[418],{"type":53,"value":245},{"type":48,"tag":201,"props":420,"children":421},{"style":214},[422],{"type":53,"value":250},{"type":48,"tag":201,"props":424,"children":425},{"style":253},[426],{"type":53,"value":256},{"type":48,"tag":201,"props":428,"children":429},{"style":242},[430],{"type":53,"value":261},{"type":48,"tag":201,"props":432,"children":433},{"style":214},[434],{"type":53,"value":266},{"type":48,"tag":201,"props":436,"children":437},{"style":214},[438],{"type":53,"value":271},{"type":48,"tag":201,"props":440,"children":441},{"class":203,"line":25},[442],{"type":48,"tag":201,"props":443,"children":444},{"style":277},[445],{"type":53,"value":446},"# Look for \"log_export_config\" in the output\n",{"type":48,"tag":379,"props":448,"children":450},{"id":449},"_2-set-up-log-export-to-aws-cloudwatch",[451],{"type":53,"value":452},"2. Set Up Log Export to AWS CloudWatch",{"type":48,"tag":454,"props":455,"children":456},"blockquote",{},[457],{"type":48,"tag":56,"props":458,"children":459},{},[460,462,467],{"type":53,"value":461},"Follow this section only if the user selected ",{"type":48,"tag":116,"props":463,"children":464},{},[465],{"type":53,"value":466},"AWS CloudWatch",{"type":53,"value":468}," in Decision 1. Skip to Step 3 if using GCP Cloud Logging.",{"type":48,"tag":470,"props":471,"children":473},"h4",{"id":472},"_21-create-a-cloudwatch-log-group",[474],{"type":53,"value":475},"2.1 Create a CloudWatch Log Group",{"type":48,"tag":190,"props":477,"children":479},{"className":192,"code":478,"language":194,"meta":195,"style":195},"# Create a log group in AWS (if it doesn't exist)\naws logs create-log-group \\\n --log-group-name cockroachdb-\u003Ccluster-name> \\\n --region \u003Caws-region>\n\n# Set retention policy (recommended)\naws logs put-retention-policy \\\n --log-group-name cockroachdb-\u003Ccluster-name> \\\n --retention-in-days 90 \\\n --region \u003Caws-region>\n",[480],{"type":48,"tag":175,"props":481,"children":482},{"__ignoreMap":195},[483,491,514,548,576,586,595,616,648,667],{"type":48,"tag":201,"props":484,"children":485},{"class":203,"line":204},[486],{"type":48,"tag":201,"props":487,"children":488},{"style":277},[489],{"type":53,"value":490},"# Create a log group in AWS (if it doesn't exist)\n",{"type":48,"tag":201,"props":492,"children":493},{"class":203,"line":29},[494,499,504,509],{"type":48,"tag":201,"props":495,"children":496},{"style":208},[497],{"type":53,"value":498},"aws",{"type":48,"tag":201,"props":500,"children":501},{"style":214},[502],{"type":53,"value":503}," logs",{"type":48,"tag":201,"props":505,"children":506},{"style":214},[507],{"type":53,"value":508}," create-log-group",{"type":48,"tag":201,"props":510,"children":511},{"style":253},[512],{"type":53,"value":513}," \\\n",{"type":48,"tag":201,"props":515,"children":516},{"class":203,"line":25},[517,522,527,532,536,540,544],{"type":48,"tag":201,"props":518,"children":519},{"style":214},[520],{"type":53,"value":521}," --log-group-name",{"type":48,"tag":201,"props":523,"children":524},{"style":214},[525],{"type":53,"value":526}," cockroachdb-",{"type":48,"tag":201,"props":528,"children":529},{"style":242},[530],{"type":53,"value":531},"\u003C",{"type":48,"tag":201,"props":533,"children":534},{"style":214},[535],{"type":53,"value":250},{"type":48,"tag":201,"props":537,"children":538},{"style":253},[539],{"type":53,"value":256},{"type":48,"tag":201,"props":541,"children":542},{"style":242},[543],{"type":53,"value":261},{"type":48,"tag":201,"props":545,"children":546},{"style":253},[547],{"type":53,"value":513},{"type":48,"tag":201,"props":549,"children":551},{"class":203,"line":550},4,[552,557,561,566,571],{"type":48,"tag":201,"props":553,"children":554},{"style":214},[555],{"type":53,"value":556}," --region",{"type":48,"tag":201,"props":558,"children":559},{"style":242},[560],{"type":53,"value":245},{"type":48,"tag":201,"props":562,"children":563},{"style":214},[564],{"type":53,"value":565},"aws-regio",{"type":48,"tag":201,"props":567,"children":568},{"style":253},[569],{"type":53,"value":570},"n",{"type":48,"tag":201,"props":572,"children":573},{"style":242},[574],{"type":53,"value":575},">\n",{"type":48,"tag":201,"props":577,"children":579},{"class":203,"line":578},5,[580],{"type":48,"tag":201,"props":581,"children":583},{"emptyLinePlaceholder":582},true,[584],{"type":53,"value":585},"\n",{"type":48,"tag":201,"props":587,"children":589},{"class":203,"line":588},6,[590],{"type":48,"tag":201,"props":591,"children":592},{"style":277},[593],{"type":53,"value":594},"# Set retention policy (recommended)\n",{"type":48,"tag":201,"props":596,"children":598},{"class":203,"line":597},7,[599,603,607,612],{"type":48,"tag":201,"props":600,"children":601},{"style":208},[602],{"type":53,"value":498},{"type":48,"tag":201,"props":604,"children":605},{"style":214},[606],{"type":53,"value":503},{"type":48,"tag":201,"props":608,"children":609},{"style":214},[610],{"type":53,"value":611}," put-retention-policy",{"type":48,"tag":201,"props":613,"children":614},{"style":253},[615],{"type":53,"value":513},{"type":48,"tag":201,"props":617,"children":619},{"class":203,"line":618},8,[620,624,628,632,636,640,644],{"type":48,"tag":201,"props":621,"children":622},{"style":214},[623],{"type":53,"value":521},{"type":48,"tag":201,"props":625,"children":626},{"style":214},[627],{"type":53,"value":526},{"type":48,"tag":201,"props":629,"children":630},{"style":242},[631],{"type":53,"value":531},{"type":48,"tag":201,"props":633,"children":634},{"style":214},[635],{"type":53,"value":250},{"type":48,"tag":201,"props":637,"children":638},{"style":253},[639],{"type":53,"value":256},{"type":48,"tag":201,"props":641,"children":642},{"style":242},[643],{"type":53,"value":261},{"type":48,"tag":201,"props":645,"children":646},{"style":253},[647],{"type":53,"value":513},{"type":48,"tag":201,"props":649,"children":651},{"class":203,"line":650},9,[652,657,663],{"type":48,"tag":201,"props":653,"children":654},{"style":214},[655],{"type":53,"value":656}," --retention-in-days",{"type":48,"tag":201,"props":658,"children":660},{"style":659},"--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C",[661],{"type":53,"value":662}," 90",{"type":48,"tag":201,"props":664,"children":665},{"style":253},[666],{"type":53,"value":513},{"type":48,"tag":201,"props":668,"children":670},{"class":203,"line":669},10,[671,675,679,683,687],{"type":48,"tag":201,"props":672,"children":673},{"style":214},[674],{"type":53,"value":556},{"type":48,"tag":201,"props":676,"children":677},{"style":242},[678],{"type":53,"value":245},{"type":48,"tag":201,"props":680,"children":681},{"style":214},[682],{"type":53,"value":565},{"type":48,"tag":201,"props":684,"children":685},{"style":253},[686],{"type":53,"value":570},{"type":48,"tag":201,"props":688,"children":689},{"style":242},[690],{"type":53,"value":575},{"type":48,"tag":470,"props":692,"children":694},{"id":693},"_22-create-an-iam-role-for-cockroachdb-cloud",[695],{"type":53,"value":696},"2.2 Create an IAM Role for CockroachDB Cloud",{"type":48,"tag":56,"props":698,"children":699},{},[700,702,709],{"type":53,"value":701},"See ",{"type":48,"tag":703,"props":704,"children":706},"a",{"href":705},"references\u002Fcloud-provider-setup.md",[707],{"type":53,"value":708},"cloud provider setup reference",{"type":53,"value":710}," for the complete IAM role policy.",{"type":48,"tag":56,"props":712,"children":713},{},[714],{"type":53,"value":715},"The IAM role must:",{"type":48,"tag":69,"props":717,"children":718},{},[719,724,759],{"type":48,"tag":73,"props":720,"children":721},{},[722],{"type":53,"value":723},"Trust the CockroachDB Cloud AWS account as an allowed principal",{"type":48,"tag":73,"props":725,"children":726},{},[727,729,735,737,743,744,750,751,757],{"type":53,"value":728},"Grant ",{"type":48,"tag":175,"props":730,"children":732},{"className":731},[],[733],{"type":53,"value":734},"logs:CreateLogStream",{"type":53,"value":736},", ",{"type":48,"tag":175,"props":738,"children":740},{"className":739},[],[741],{"type":53,"value":742},"logs:PutLogEvents",{"type":53,"value":736},{"type":48,"tag":175,"props":745,"children":747},{"className":746},[],[748],{"type":53,"value":749},"logs:DescribeLogGroups",{"type":53,"value":736},{"type":48,"tag":175,"props":752,"children":754},{"className":753},[],[755],{"type":53,"value":756},"logs:DescribeLogStreams",{"type":53,"value":758}," permissions",{"type":48,"tag":73,"props":760,"children":761},{},[762],{"type":53,"value":763},"Be scoped to the specific log group",{"type":48,"tag":470,"props":765,"children":767},{"id":766},"_23-enable-log-export",[768],{"type":53,"value":769},"2.3 Enable Log Export",{"type":48,"tag":190,"props":771,"children":773},{"className":192,"code":772,"language":194,"meta":195,"style":195},"# Enable log export to CloudWatch\nccloud cluster log-export create \u003Ccluster-id> \\\n --log-group-name cockroachdb-\u003Ccluster-name> \\\n --auth-principal \u003Ciam-role-arn> \\\n --type AWS_CLOUDWATCH \\\n --region \u003Caws-region>\n",[774],{"type":48,"tag":175,"props":775,"children":776},{"__ignoreMap":195},[777,785,828,859,888,905],{"type":48,"tag":201,"props":778,"children":779},{"class":203,"line":204},[780],{"type":48,"tag":201,"props":781,"children":782},{"style":277},[783],{"type":53,"value":784},"# Enable log export to CloudWatch\n",{"type":48,"tag":201,"props":786,"children":787},{"class":203,"line":29},[788,792,796,801,806,810,815,820,824],{"type":48,"tag":201,"props":789,"children":790},{"style":208},[791],{"type":53,"value":211},{"type":48,"tag":201,"props":793,"children":794},{"style":214},[795],{"type":53,"value":234},{"type":48,"tag":201,"props":797,"children":798},{"style":214},[799],{"type":53,"value":800}," log-export",{"type":48,"tag":201,"props":802,"children":803},{"style":214},[804],{"type":53,"value":805}," create",{"type":48,"tag":201,"props":807,"children":808},{"style":242},[809],{"type":53,"value":245},{"type":48,"tag":201,"props":811,"children":812},{"style":214},[813],{"type":53,"value":814},"cluster-i",{"type":48,"tag":201,"props":816,"children":817},{"style":253},[818],{"type":53,"value":819},"d",{"type":48,"tag":201,"props":821,"children":822},{"style":242},[823],{"type":53,"value":261},{"type":48,"tag":201,"props":825,"children":826},{"style":253},[827],{"type":53,"value":513},{"type":48,"tag":201,"props":829,"children":830},{"class":203,"line":25},[831,835,839,843,847,851,855],{"type":48,"tag":201,"props":832,"children":833},{"style":214},[834],{"type":53,"value":521},{"type":48,"tag":201,"props":836,"children":837},{"style":214},[838],{"type":53,"value":526},{"type":48,"tag":201,"props":840,"children":841},{"style":242},[842],{"type":53,"value":531},{"type":48,"tag":201,"props":844,"children":845},{"style":214},[846],{"type":53,"value":250},{"type":48,"tag":201,"props":848,"children":849},{"style":253},[850],{"type":53,"value":256},{"type":48,"tag":201,"props":852,"children":853},{"style":242},[854],{"type":53,"value":261},{"type":48,"tag":201,"props":856,"children":857},{"style":253},[858],{"type":53,"value":513},{"type":48,"tag":201,"props":860,"children":861},{"class":203,"line":550},[862,867,871,876,880,884],{"type":48,"tag":201,"props":863,"children":864},{"style":214},[865],{"type":53,"value":866}," --auth-principal",{"type":48,"tag":201,"props":868,"children":869},{"style":242},[870],{"type":53,"value":245},{"type":48,"tag":201,"props":872,"children":873},{"style":214},[874],{"type":53,"value":875},"iam-role-ar",{"type":48,"tag":201,"props":877,"children":878},{"style":253},[879],{"type":53,"value":570},{"type":48,"tag":201,"props":881,"children":882},{"style":242},[883],{"type":53,"value":261},{"type":48,"tag":201,"props":885,"children":886},{"style":253},[887],{"type":53,"value":513},{"type":48,"tag":201,"props":889,"children":890},{"class":203,"line":578},[891,896,901],{"type":48,"tag":201,"props":892,"children":893},{"style":214},[894],{"type":53,"value":895}," --type",{"type":48,"tag":201,"props":897,"children":898},{"style":214},[899],{"type":53,"value":900}," AWS_CLOUDWATCH",{"type":48,"tag":201,"props":902,"children":903},{"style":253},[904],{"type":53,"value":513},{"type":48,"tag":201,"props":906,"children":907},{"class":203,"line":588},[908,912,916,920,924],{"type":48,"tag":201,"props":909,"children":910},{"style":214},[911],{"type":53,"value":556},{"type":48,"tag":201,"props":913,"children":914},{"style":242},[915],{"type":53,"value":245},{"type":48,"tag":201,"props":917,"children":918},{"style":214},[919],{"type":53,"value":565},{"type":48,"tag":201,"props":921,"children":922},{"style":253},[923],{"type":53,"value":570},{"type":48,"tag":201,"props":925,"children":926},{"style":242},[927],{"type":53,"value":575},{"type":48,"tag":379,"props":929,"children":931},{"id":930},"_3-set-up-log-export-to-gcp-cloud-logging",[932],{"type":53,"value":933},"3. Set Up Log Export to GCP Cloud Logging",{"type":48,"tag":454,"props":935,"children":936},{},[937],{"type":48,"tag":56,"props":938,"children":939},{},[940,941,946],{"type":53,"value":461},{"type":48,"tag":116,"props":942,"children":943},{},[944],{"type":53,"value":945},"GCP Cloud Logging",{"type":53,"value":947}," in Decision 1. Skip if using AWS CloudWatch.",{"type":48,"tag":470,"props":949,"children":951},{"id":950},"_31-enable-cloud-logging-api",[952],{"type":53,"value":953},"3.1 Enable Cloud Logging API",{"type":48,"tag":190,"props":955,"children":957},{"className":192,"code":956,"language":194,"meta":195,"style":195},"gcloud services enable logging.googleapis.com\n",[958],{"type":48,"tag":175,"props":959,"children":960},{"__ignoreMap":195},[961],{"type":48,"tag":201,"props":962,"children":963},{"class":203,"line":204},[964,969,974,979],{"type":48,"tag":201,"props":965,"children":966},{"style":208},[967],{"type":53,"value":968},"gcloud",{"type":48,"tag":201,"props":970,"children":971},{"style":214},[972],{"type":53,"value":973}," services",{"type":48,"tag":201,"props":975,"children":976},{"style":214},[977],{"type":53,"value":978}," enable",{"type":48,"tag":201,"props":980,"children":981},{"style":214},[982],{"type":53,"value":983}," logging.googleapis.com\n",{"type":48,"tag":470,"props":985,"children":987},{"id":986},"_32-grant-cockroachdb-cloud-service-account-access",[988],{"type":53,"value":989},"3.2 Grant CockroachDB Cloud Service Account Access",{"type":48,"tag":190,"props":991,"children":993},{"className":192,"code":992,"language":194,"meta":195,"style":195},"# Get the CockroachDB Cloud service account from ccloud cluster info\n# Grant Logs Writer role\ngcloud projects add-iam-policy-binding \u003Cgcp-project-id> \\\n --member=\"serviceAccount:\u003Ccockroachdb-service-account>\" \\\n --role=\"roles\u002Flogging.logWriter\"\n",[994],{"type":48,"tag":175,"props":995,"children":996},{"__ignoreMap":195},[997,1005,1013,1051,1077],{"type":48,"tag":201,"props":998,"children":999},{"class":203,"line":204},[1000],{"type":48,"tag":201,"props":1001,"children":1002},{"style":277},[1003],{"type":53,"value":1004},"# Get the CockroachDB Cloud service account from ccloud cluster info\n",{"type":48,"tag":201,"props":1006,"children":1007},{"class":203,"line":29},[1008],{"type":48,"tag":201,"props":1009,"children":1010},{"style":277},[1011],{"type":53,"value":1012},"# Grant Logs Writer role\n",{"type":48,"tag":201,"props":1014,"children":1015},{"class":203,"line":25},[1016,1020,1025,1030,1034,1039,1043,1047],{"type":48,"tag":201,"props":1017,"children":1018},{"style":208},[1019],{"type":53,"value":968},{"type":48,"tag":201,"props":1021,"children":1022},{"style":214},[1023],{"type":53,"value":1024}," projects",{"type":48,"tag":201,"props":1026,"children":1027},{"style":214},[1028],{"type":53,"value":1029}," add-iam-policy-binding",{"type":48,"tag":201,"props":1031,"children":1032},{"style":242},[1033],{"type":53,"value":245},{"type":48,"tag":201,"props":1035,"children":1036},{"style":214},[1037],{"type":53,"value":1038},"gcp-project-i",{"type":48,"tag":201,"props":1040,"children":1041},{"style":253},[1042],{"type":53,"value":819},{"type":48,"tag":201,"props":1044,"children":1045},{"style":242},[1046],{"type":53,"value":261},{"type":48,"tag":201,"props":1048,"children":1049},{"style":253},[1050],{"type":53,"value":513},{"type":48,"tag":201,"props":1052,"children":1053},{"class":203,"line":550},[1054,1059,1064,1069,1073],{"type":48,"tag":201,"props":1055,"children":1056},{"style":214},[1057],{"type":53,"value":1058}," --member=",{"type":48,"tag":201,"props":1060,"children":1061},{"style":242},[1062],{"type":53,"value":1063},"\"",{"type":48,"tag":201,"props":1065,"children":1066},{"style":214},[1067],{"type":53,"value":1068},"serviceAccount:\u003Ccockroachdb-service-account>",{"type":48,"tag":201,"props":1070,"children":1071},{"style":242},[1072],{"type":53,"value":1063},{"type":48,"tag":201,"props":1074,"children":1075},{"style":253},[1076],{"type":53,"value":513},{"type":48,"tag":201,"props":1078,"children":1079},{"class":203,"line":578},[1080,1085,1089,1094],{"type":48,"tag":201,"props":1081,"children":1082},{"style":214},[1083],{"type":53,"value":1084}," --role=",{"type":48,"tag":201,"props":1086,"children":1087},{"style":242},[1088],{"type":53,"value":1063},{"type":48,"tag":201,"props":1090,"children":1091},{"style":214},[1092],{"type":53,"value":1093},"roles\u002Flogging.logWriter",{"type":48,"tag":201,"props":1095,"children":1096},{"style":242},[1097],{"type":53,"value":1098},"\"\n",{"type":48,"tag":470,"props":1100,"children":1102},{"id":1101},"_33-enable-log-export",[1103],{"type":53,"value":1104},"3.3 Enable Log Export",{"type":48,"tag":190,"props":1106,"children":1108},{"className":192,"code":1107,"language":194,"meta":195,"style":195},"ccloud cluster log-export create \u003Ccluster-id> \\\n --auth-principal \u003Cgcp-project-id> \\\n --type GCP_CLOUD_LOGGING\n",[1109],{"type":48,"tag":175,"props":1110,"children":1111},{"__ignoreMap":195},[1112,1151,1178],{"type":48,"tag":201,"props":1113,"children":1114},{"class":203,"line":204},[1115,1119,1123,1127,1131,1135,1139,1143,1147],{"type":48,"tag":201,"props":1116,"children":1117},{"style":208},[1118],{"type":53,"value":211},{"type":48,"tag":201,"props":1120,"children":1121},{"style":214},[1122],{"type":53,"value":234},{"type":48,"tag":201,"props":1124,"children":1125},{"style":214},[1126],{"type":53,"value":800},{"type":48,"tag":201,"props":1128,"children":1129},{"style":214},[1130],{"type":53,"value":805},{"type":48,"tag":201,"props":1132,"children":1133},{"style":242},[1134],{"type":53,"value":245},{"type":48,"tag":201,"props":1136,"children":1137},{"style":214},[1138],{"type":53,"value":814},{"type":48,"tag":201,"props":1140,"children":1141},{"style":253},[1142],{"type":53,"value":819},{"type":48,"tag":201,"props":1144,"children":1145},{"style":242},[1146],{"type":53,"value":261},{"type":48,"tag":201,"props":1148,"children":1149},{"style":253},[1150],{"type":53,"value":513},{"type":48,"tag":201,"props":1152,"children":1153},{"class":203,"line":29},[1154,1158,1162,1166,1170,1174],{"type":48,"tag":201,"props":1155,"children":1156},{"style":214},[1157],{"type":53,"value":866},{"type":48,"tag":201,"props":1159,"children":1160},{"style":242},[1161],{"type":53,"value":245},{"type":48,"tag":201,"props":1163,"children":1164},{"style":214},[1165],{"type":53,"value":1038},{"type":48,"tag":201,"props":1167,"children":1168},{"style":253},[1169],{"type":53,"value":819},{"type":48,"tag":201,"props":1171,"children":1172},{"style":242},[1173],{"type":53,"value":261},{"type":48,"tag":201,"props":1175,"children":1176},{"style":253},[1177],{"type":53,"value":513},{"type":48,"tag":201,"props":1179,"children":1180},{"class":203,"line":25},[1181,1185],{"type":48,"tag":201,"props":1182,"children":1183},{"style":214},[1184],{"type":53,"value":895},{"type":48,"tag":201,"props":1186,"children":1187},{"style":214},[1188],{"type":53,"value":1189}," GCP_CLOUD_LOGGING\n",{"type":48,"tag":379,"props":1191,"children":1193},{"id":1192},"_4-configure-metric-export",[1194],{"type":53,"value":1195},"4. Configure Metric Export",{"type":48,"tag":454,"props":1197,"children":1198},{},[1199],{"type":48,"tag":56,"props":1200,"children":1201},{},[1202,1204,1209],{"type":53,"value":1203},"Skip this section if the user selected ",{"type":48,"tag":116,"props":1205,"children":1206},{},[1207],{"type":53,"value":1208},"Skip",{"type":53,"value":1210}," in Decision 2. Follow only the relevant subsection (4.1 or 4.2) based on the selected metric export destination.",{"type":48,"tag":56,"props":1212,"children":1213},{},[1214],{"type":53,"value":1215},"Metric export sends CockroachDB performance metrics to CloudWatch or Datadog.",{"type":48,"tag":470,"props":1217,"children":1219},{"id":1218},"_41-metric-export-to-cloudwatch",[1220],{"type":53,"value":1221},"4.1 Metric Export to CloudWatch",{"type":48,"tag":190,"props":1223,"children":1225},{"className":192,"code":1224,"language":194,"meta":195,"style":195},"ccloud cluster metric-export create cloudwatch \u003Ccluster-id> \\\n --role-arn \u003Ciam-role-arn> \\\n --target-region \u003Caws-region>\n",[1226],{"type":48,"tag":175,"props":1227,"children":1228},{"__ignoreMap":195},[1229,1274,1302],{"type":48,"tag":201,"props":1230,"children":1231},{"class":203,"line":204},[1232,1236,1240,1245,1249,1254,1258,1262,1266,1270],{"type":48,"tag":201,"props":1233,"children":1234},{"style":208},[1235],{"type":53,"value":211},{"type":48,"tag":201,"props":1237,"children":1238},{"style":214},[1239],{"type":53,"value":234},{"type":48,"tag":201,"props":1241,"children":1242},{"style":214},[1243],{"type":53,"value":1244}," metric-export",{"type":48,"tag":201,"props":1246,"children":1247},{"style":214},[1248],{"type":53,"value":805},{"type":48,"tag":201,"props":1250,"children":1251},{"style":214},[1252],{"type":53,"value":1253}," cloudwatch",{"type":48,"tag":201,"props":1255,"children":1256},{"style":242},[1257],{"type":53,"value":245},{"type":48,"tag":201,"props":1259,"children":1260},{"style":214},[1261],{"type":53,"value":814},{"type":48,"tag":201,"props":1263,"children":1264},{"style":253},[1265],{"type":53,"value":819},{"type":48,"tag":201,"props":1267,"children":1268},{"style":242},[1269],{"type":53,"value":261},{"type":48,"tag":201,"props":1271,"children":1272},{"style":253},[1273],{"type":53,"value":513},{"type":48,"tag":201,"props":1275,"children":1276},{"class":203,"line":29},[1277,1282,1286,1290,1294,1298],{"type":48,"tag":201,"props":1278,"children":1279},{"style":214},[1280],{"type":53,"value":1281}," --role-arn",{"type":48,"tag":201,"props":1283,"children":1284},{"style":242},[1285],{"type":53,"value":245},{"type":48,"tag":201,"props":1287,"children":1288},{"style":214},[1289],{"type":53,"value":875},{"type":48,"tag":201,"props":1291,"children":1292},{"style":253},[1293],{"type":53,"value":570},{"type":48,"tag":201,"props":1295,"children":1296},{"style":242},[1297],{"type":53,"value":261},{"type":48,"tag":201,"props":1299,"children":1300},{"style":253},[1301],{"type":53,"value":513},{"type":48,"tag":201,"props":1303,"children":1304},{"class":203,"line":25},[1305,1310,1314,1318,1322],{"type":48,"tag":201,"props":1306,"children":1307},{"style":214},[1308],{"type":53,"value":1309}," --target-region",{"type":48,"tag":201,"props":1311,"children":1312},{"style":242},[1313],{"type":53,"value":245},{"type":48,"tag":201,"props":1315,"children":1316},{"style":214},[1317],{"type":53,"value":565},{"type":48,"tag":201,"props":1319,"children":1320},{"style":253},[1321],{"type":53,"value":570},{"type":48,"tag":201,"props":1323,"children":1324},{"style":242},[1325],{"type":53,"value":575},{"type":48,"tag":56,"props":1327,"children":1328},{},[1329,1331,1336],{"type":53,"value":1330},"The IAM role for metric export needs ",{"type":48,"tag":175,"props":1332,"children":1334},{"className":1333},[],[1335],{"type":53,"value":349},{"type":53,"value":351},{"type":48,"tag":470,"props":1338,"children":1340},{"id":1339},"_42-metric-export-to-datadog",[1341],{"type":53,"value":1342},"4.2 Metric Export to Datadog",{"type":48,"tag":190,"props":1344,"children":1346},{"className":192,"code":1345,"language":194,"meta":195,"style":195},"ccloud cluster metric-export create datadog \u003Ccluster-id> \\\n --api-key \u003Cdatadog-api-key> \\\n --site \u003Cdatadog-site>\n",[1347],{"type":48,"tag":175,"props":1348,"children":1349},{"__ignoreMap":195},[1350,1394,1424],{"type":48,"tag":201,"props":1351,"children":1352},{"class":203,"line":204},[1353,1357,1361,1365,1369,1374,1378,1382,1386,1390],{"type":48,"tag":201,"props":1354,"children":1355},{"style":208},[1356],{"type":53,"value":211},{"type":48,"tag":201,"props":1358,"children":1359},{"style":214},[1360],{"type":53,"value":234},{"type":48,"tag":201,"props":1362,"children":1363},{"style":214},[1364],{"type":53,"value":1244},{"type":48,"tag":201,"props":1366,"children":1367},{"style":214},[1368],{"type":53,"value":805},{"type":48,"tag":201,"props":1370,"children":1371},{"style":214},[1372],{"type":53,"value":1373}," datadog",{"type":48,"tag":201,"props":1375,"children":1376},{"style":242},[1377],{"type":53,"value":245},{"type":48,"tag":201,"props":1379,"children":1380},{"style":214},[1381],{"type":53,"value":814},{"type":48,"tag":201,"props":1383,"children":1384},{"style":253},[1385],{"type":53,"value":819},{"type":48,"tag":201,"props":1387,"children":1388},{"style":242},[1389],{"type":53,"value":261},{"type":48,"tag":201,"props":1391,"children":1392},{"style":253},[1393],{"type":53,"value":513},{"type":48,"tag":201,"props":1395,"children":1396},{"class":203,"line":29},[1397,1402,1406,1411,1416,1420],{"type":48,"tag":201,"props":1398,"children":1399},{"style":214},[1400],{"type":53,"value":1401}," --api-key",{"type":48,"tag":201,"props":1403,"children":1404},{"style":242},[1405],{"type":53,"value":245},{"type":48,"tag":201,"props":1407,"children":1408},{"style":214},[1409],{"type":53,"value":1410},"datadog-api-ke",{"type":48,"tag":201,"props":1412,"children":1413},{"style":253},[1414],{"type":53,"value":1415},"y",{"type":48,"tag":201,"props":1417,"children":1418},{"style":242},[1419],{"type":53,"value":261},{"type":48,"tag":201,"props":1421,"children":1422},{"style":253},[1423],{"type":53,"value":513},{"type":48,"tag":201,"props":1425,"children":1426},{"class":203,"line":25},[1427,1432,1436,1441,1445],{"type":48,"tag":201,"props":1428,"children":1429},{"style":214},[1430],{"type":53,"value":1431}," --site",{"type":48,"tag":201,"props":1433,"children":1434},{"style":242},[1435],{"type":53,"value":245},{"type":48,"tag":201,"props":1437,"children":1438},{"style":214},[1439],{"type":53,"value":1440},"datadog-sit",{"type":48,"tag":201,"props":1442,"children":1443},{"style":253},[1444],{"type":53,"value":256},{"type":48,"tag":201,"props":1446,"children":1447},{"style":242},[1448],{"type":53,"value":575},{"type":48,"tag":56,"props":1450,"children":1451},{},[1452,1457,1459,1465,1467,1473,1475,1481,1483,1489],{"type":48,"tag":116,"props":1453,"children":1454},{},[1455],{"type":53,"value":1456},"Datadog site values:",{"type":53,"value":1458}," ",{"type":48,"tag":175,"props":1460,"children":1462},{"className":1461},[],[1463],{"type":53,"value":1464},"datadoghq.com",{"type":53,"value":1466}," (US), ",{"type":48,"tag":175,"props":1468,"children":1470},{"className":1469},[],[1471],{"type":53,"value":1472},"datadoghq.eu",{"type":53,"value":1474}," (EU), ",{"type":48,"tag":175,"props":1476,"children":1478},{"className":1477},[],[1479],{"type":53,"value":1480},"us3.datadoghq.com",{"type":53,"value":1482}," (US3), ",{"type":48,"tag":175,"props":1484,"children":1486},{"className":1485},[],[1487],{"type":53,"value":1488},"us5.datadoghq.com",{"type":53,"value":1490}," (US5)",{"type":48,"tag":379,"props":1492,"children":1494},{"id":1493},"_5-verify-log-and-metric-export",[1495],{"type":53,"value":1496},"5. Verify Log and Metric Export",{"type":48,"tag":190,"props":1498,"children":1500},{"className":192,"code":1499,"language":194,"meta":195,"style":195},"# Check log export status\nccloud cluster log-export list \u003Ccluster-id> -o json\n# Status should be ENABLED\n\n# Check metric export status\nccloud cluster metric-export list \u003Ccluster-id> -o json\n",[1501],{"type":48,"tag":175,"props":1502,"children":1503},{"__ignoreMap":195},[1504,1512,1556,1564,1571,1579],{"type":48,"tag":201,"props":1505,"children":1506},{"class":203,"line":204},[1507],{"type":48,"tag":201,"props":1508,"children":1509},{"style":277},[1510],{"type":53,"value":1511},"# Check log export status\n",{"type":48,"tag":201,"props":1513,"children":1514},{"class":203,"line":29},[1515,1519,1523,1527,1532,1536,1540,1544,1548,1552],{"type":48,"tag":201,"props":1516,"children":1517},{"style":208},[1518],{"type":53,"value":211},{"type":48,"tag":201,"props":1520,"children":1521},{"style":214},[1522],{"type":53,"value":234},{"type":48,"tag":201,"props":1524,"children":1525},{"style":214},[1526],{"type":53,"value":800},{"type":48,"tag":201,"props":1528,"children":1529},{"style":214},[1530],{"type":53,"value":1531}," list",{"type":48,"tag":201,"props":1533,"children":1534},{"style":242},[1535],{"type":53,"value":245},{"type":48,"tag":201,"props":1537,"children":1538},{"style":214},[1539],{"type":53,"value":814},{"type":48,"tag":201,"props":1541,"children":1542},{"style":253},[1543],{"type":53,"value":819},{"type":48,"tag":201,"props":1545,"children":1546},{"style":242},[1547],{"type":53,"value":261},{"type":48,"tag":201,"props":1549,"children":1550},{"style":214},[1551],{"type":53,"value":266},{"type":48,"tag":201,"props":1553,"children":1554},{"style":214},[1555],{"type":53,"value":271},{"type":48,"tag":201,"props":1557,"children":1558},{"class":203,"line":25},[1559],{"type":48,"tag":201,"props":1560,"children":1561},{"style":277},[1562],{"type":53,"value":1563},"# Status should be ENABLED\n",{"type":48,"tag":201,"props":1565,"children":1566},{"class":203,"line":550},[1567],{"type":48,"tag":201,"props":1568,"children":1569},{"emptyLinePlaceholder":582},[1570],{"type":53,"value":585},{"type":48,"tag":201,"props":1572,"children":1573},{"class":203,"line":578},[1574],{"type":48,"tag":201,"props":1575,"children":1576},{"style":277},[1577],{"type":53,"value":1578},"# Check metric export status\n",{"type":48,"tag":201,"props":1580,"children":1581},{"class":203,"line":588},[1582,1586,1590,1594,1598,1602,1606,1610,1614,1618],{"type":48,"tag":201,"props":1583,"children":1584},{"style":208},[1585],{"type":53,"value":211},{"type":48,"tag":201,"props":1587,"children":1588},{"style":214},[1589],{"type":53,"value":234},{"type":48,"tag":201,"props":1591,"children":1592},{"style":214},[1593],{"type":53,"value":1244},{"type":48,"tag":201,"props":1595,"children":1596},{"style":214},[1597],{"type":53,"value":1531},{"type":48,"tag":201,"props":1599,"children":1600},{"style":242},[1601],{"type":53,"value":245},{"type":48,"tag":201,"props":1603,"children":1604},{"style":214},[1605],{"type":53,"value":814},{"type":48,"tag":201,"props":1607,"children":1608},{"style":253},[1609],{"type":53,"value":819},{"type":48,"tag":201,"props":1611,"children":1612},{"style":242},[1613],{"type":53,"value":261},{"type":48,"tag":201,"props":1615,"children":1616},{"style":214},[1617],{"type":53,"value":266},{"type":48,"tag":201,"props":1619,"children":1620},{"style":214},[1621],{"type":53,"value":271},{"type":48,"tag":56,"props":1623,"children":1624},{},[1625],{"type":48,"tag":116,"props":1626,"children":1627},{},[1628],{"type":53,"value":1629},"Verify log delivery in CloudWatch:",{"type":48,"tag":190,"props":1631,"children":1633},{"className":192,"code":1632,"language":194,"meta":195,"style":195},"# Check for recent log streams\naws logs describe-log-streams \\\n --log-group-name cockroachdb-\u003Ccluster-name> \\\n --order-by LastEventTime \\\n --descending \\\n --limit 5 \\\n --region \u003Caws-region>\n\n# Tail recent log events\naws logs tail cockroachdb-\u003Ccluster-name> \\\n --since 1h \\\n --region \u003Caws-region>\n",[1634],{"type":48,"tag":175,"props":1635,"children":1636},{"__ignoreMap":195},[1637,1645,1665,1696,1713,1725,1742,1765,1772,1780,1820,1838],{"type":48,"tag":201,"props":1638,"children":1639},{"class":203,"line":204},[1640],{"type":48,"tag":201,"props":1641,"children":1642},{"style":277},[1643],{"type":53,"value":1644},"# Check for recent log streams\n",{"type":48,"tag":201,"props":1646,"children":1647},{"class":203,"line":29},[1648,1652,1656,1661],{"type":48,"tag":201,"props":1649,"children":1650},{"style":208},[1651],{"type":53,"value":498},{"type":48,"tag":201,"props":1653,"children":1654},{"style":214},[1655],{"type":53,"value":503},{"type":48,"tag":201,"props":1657,"children":1658},{"style":214},[1659],{"type":53,"value":1660}," describe-log-streams",{"type":48,"tag":201,"props":1662,"children":1663},{"style":253},[1664],{"type":53,"value":513},{"type":48,"tag":201,"props":1666,"children":1667},{"class":203,"line":25},[1668,1672,1676,1680,1684,1688,1692],{"type":48,"tag":201,"props":1669,"children":1670},{"style":214},[1671],{"type":53,"value":521},{"type":48,"tag":201,"props":1673,"children":1674},{"style":214},[1675],{"type":53,"value":526},{"type":48,"tag":201,"props":1677,"children":1678},{"style":242},[1679],{"type":53,"value":531},{"type":48,"tag":201,"props":1681,"children":1682},{"style":214},[1683],{"type":53,"value":250},{"type":48,"tag":201,"props":1685,"children":1686},{"style":253},[1687],{"type":53,"value":256},{"type":48,"tag":201,"props":1689,"children":1690},{"style":242},[1691],{"type":53,"value":261},{"type":48,"tag":201,"props":1693,"children":1694},{"style":253},[1695],{"type":53,"value":513},{"type":48,"tag":201,"props":1697,"children":1698},{"class":203,"line":550},[1699,1704,1709],{"type":48,"tag":201,"props":1700,"children":1701},{"style":214},[1702],{"type":53,"value":1703}," --order-by",{"type":48,"tag":201,"props":1705,"children":1706},{"style":214},[1707],{"type":53,"value":1708}," LastEventTime",{"type":48,"tag":201,"props":1710,"children":1711},{"style":253},[1712],{"type":53,"value":513},{"type":48,"tag":201,"props":1714,"children":1715},{"class":203,"line":578},[1716,1721],{"type":48,"tag":201,"props":1717,"children":1718},{"style":214},[1719],{"type":53,"value":1720}," --descending",{"type":48,"tag":201,"props":1722,"children":1723},{"style":253},[1724],{"type":53,"value":513},{"type":48,"tag":201,"props":1726,"children":1727},{"class":203,"line":588},[1728,1733,1738],{"type":48,"tag":201,"props":1729,"children":1730},{"style":214},[1731],{"type":53,"value":1732}," --limit",{"type":48,"tag":201,"props":1734,"children":1735},{"style":659},[1736],{"type":53,"value":1737}," 5",{"type":48,"tag":201,"props":1739,"children":1740},{"style":253},[1741],{"type":53,"value":513},{"type":48,"tag":201,"props":1743,"children":1744},{"class":203,"line":597},[1745,1749,1753,1757,1761],{"type":48,"tag":201,"props":1746,"children":1747},{"style":214},[1748],{"type":53,"value":556},{"type":48,"tag":201,"props":1750,"children":1751},{"style":242},[1752],{"type":53,"value":245},{"type":48,"tag":201,"props":1754,"children":1755},{"style":214},[1756],{"type":53,"value":565},{"type":48,"tag":201,"props":1758,"children":1759},{"style":253},[1760],{"type":53,"value":570},{"type":48,"tag":201,"props":1762,"children":1763},{"style":242},[1764],{"type":53,"value":575},{"type":48,"tag":201,"props":1766,"children":1767},{"class":203,"line":618},[1768],{"type":48,"tag":201,"props":1769,"children":1770},{"emptyLinePlaceholder":582},[1771],{"type":53,"value":585},{"type":48,"tag":201,"props":1773,"children":1774},{"class":203,"line":650},[1775],{"type":48,"tag":201,"props":1776,"children":1777},{"style":277},[1778],{"type":53,"value":1779},"# Tail recent log events\n",{"type":48,"tag":201,"props":1781,"children":1782},{"class":203,"line":669},[1783,1787,1791,1796,1800,1804,1808,1812,1816],{"type":48,"tag":201,"props":1784,"children":1785},{"style":208},[1786],{"type":53,"value":498},{"type":48,"tag":201,"props":1788,"children":1789},{"style":214},[1790],{"type":53,"value":503},{"type":48,"tag":201,"props":1792,"children":1793},{"style":214},[1794],{"type":53,"value":1795}," tail",{"type":48,"tag":201,"props":1797,"children":1798},{"style":214},[1799],{"type":53,"value":526},{"type":48,"tag":201,"props":1801,"children":1802},{"style":242},[1803],{"type":53,"value":531},{"type":48,"tag":201,"props":1805,"children":1806},{"style":214},[1807],{"type":53,"value":250},{"type":48,"tag":201,"props":1809,"children":1810},{"style":253},[1811],{"type":53,"value":256},{"type":48,"tag":201,"props":1813,"children":1814},{"style":242},[1815],{"type":53,"value":261},{"type":48,"tag":201,"props":1817,"children":1818},{"style":253},[1819],{"type":53,"value":513},{"type":48,"tag":201,"props":1821,"children":1823},{"class":203,"line":1822},11,[1824,1829,1834],{"type":48,"tag":201,"props":1825,"children":1826},{"style":214},[1827],{"type":53,"value":1828}," --since",{"type":48,"tag":201,"props":1830,"children":1831},{"style":214},[1832],{"type":53,"value":1833}," 1h",{"type":48,"tag":201,"props":1835,"children":1836},{"style":253},[1837],{"type":53,"value":513},{"type":48,"tag":201,"props":1839,"children":1841},{"class":203,"line":1840},12,[1842,1846,1850,1854,1858],{"type":48,"tag":201,"props":1843,"children":1844},{"style":214},[1845],{"type":53,"value":556},{"type":48,"tag":201,"props":1847,"children":1848},{"style":242},[1849],{"type":53,"value":245},{"type":48,"tag":201,"props":1851,"children":1852},{"style":214},[1853],{"type":53,"value":565},{"type":48,"tag":201,"props":1855,"children":1856},{"style":253},[1857],{"type":53,"value":570},{"type":48,"tag":201,"props":1859,"children":1860},{"style":242},[1861],{"type":53,"value":575},{"type":48,"tag":56,"props":1863,"children":1864},{},[1865],{"type":48,"tag":116,"props":1866,"children":1867},{},[1868],{"type":53,"value":1869},"Verify audit logs are being exported:",{"type":48,"tag":56,"props":1871,"children":1872},{},[1873],{"type":53,"value":1874},"Audit logs are included in the log export if SQL audit logging is enabled on the cluster. To confirm:",{"type":48,"tag":190,"props":1876,"children":1880},{"className":1877,"code":1878,"language":1879,"meta":195,"style":195},"language-sql shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","-- Check audit logging is enabled\nSHOW CLUSTER SETTING sql.log.admin_audit.enabled;\nSHOW CLUSTER SETTING sql.log.user_audit;\n","sql",[1881],{"type":48,"tag":175,"props":1882,"children":1883},{"__ignoreMap":195},[1884,1892,1900],{"type":48,"tag":201,"props":1885,"children":1886},{"class":203,"line":204},[1887],{"type":48,"tag":201,"props":1888,"children":1889},{},[1890],{"type":53,"value":1891},"-- Check audit logging is enabled\n",{"type":48,"tag":201,"props":1893,"children":1894},{"class":203,"line":29},[1895],{"type":48,"tag":201,"props":1896,"children":1897},{},[1898],{"type":53,"value":1899},"SHOW CLUSTER SETTING sql.log.admin_audit.enabled;\n",{"type":48,"tag":201,"props":1901,"children":1902},{"class":203,"line":25},[1903],{"type":48,"tag":201,"props":1904,"children":1905},{},[1906],{"type":53,"value":1907},"SHOW CLUSTER SETTING sql.log.user_audit;\n",{"type":48,"tag":56,"props":1909,"children":1910},{},[1911],{"type":53,"value":1912},"If audit logging is enabled but audit events are not appearing in CloudWatch, check:",{"type":48,"tag":1914,"props":1915,"children":1916},"ol",{},[1917,1922,1927,1932],{"type":48,"tag":73,"props":1918,"children":1919},{},[1920],{"type":53,"value":1921},"Log export status is ENABLED",{"type":48,"tag":73,"props":1923,"children":1924},{},[1925],{"type":53,"value":1926},"The IAM role has correct permissions",{"type":48,"tag":73,"props":1928,"children":1929},{},[1930],{"type":53,"value":1931},"Log group name matches the configured export target",{"type":48,"tag":73,"props":1933,"children":1934},{},[1935],{"type":53,"value":1936},"Allow 5-10 minutes for initial log delivery",{"type":48,"tag":379,"props":1938,"children":1940},{"id":1939},"_6-configure-log-export-via-terraform",[1941],{"type":53,"value":1942},"6. Configure Log Export via Terraform",{"type":48,"tag":190,"props":1944,"children":1948},{"className":1945,"code":1946,"language":1947,"meta":195,"style":195},"language-hcl shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","resource \"cockroach_log_export_config\" \"main\" {\n id = cockroach_cluster.main.id\n auth_principal = \"\u003Ciam-role-arn>\"\n log_name = \"cockroachdb-${cockroach_cluster.main.name}\"\n type = \"AWS_CLOUDWATCH\"\n region = \"\u003Caws-region>\"\n}\n\nresource \"cockroach_metric_export_cloudwatch_config\" \"main\" {\n id = cockroach_cluster.main.id\n role_arn = \"\u003Ciam-role-arn>\"\n target_region = \"\u003Caws-region>\"\n}\n","hcl",[1949],{"type":48,"tag":175,"props":1950,"children":1951},{"__ignoreMap":195},[1952,1960,1968,1976,1984,1992,2000,2008,2015,2023,2030,2038,2046],{"type":48,"tag":201,"props":1953,"children":1954},{"class":203,"line":204},[1955],{"type":48,"tag":201,"props":1956,"children":1957},{},[1958],{"type":53,"value":1959},"resource \"cockroach_log_export_config\" \"main\" {\n",{"type":48,"tag":201,"props":1961,"children":1962},{"class":203,"line":29},[1963],{"type":48,"tag":201,"props":1964,"children":1965},{},[1966],{"type":53,"value":1967}," id = cockroach_cluster.main.id\n",{"type":48,"tag":201,"props":1969,"children":1970},{"class":203,"line":25},[1971],{"type":48,"tag":201,"props":1972,"children":1973},{},[1974],{"type":53,"value":1975}," auth_principal = \"\u003Ciam-role-arn>\"\n",{"type":48,"tag":201,"props":1977,"children":1978},{"class":203,"line":550},[1979],{"type":48,"tag":201,"props":1980,"children":1981},{},[1982],{"type":53,"value":1983}," log_name = \"cockroachdb-${cockroach_cluster.main.name}\"\n",{"type":48,"tag":201,"props":1985,"children":1986},{"class":203,"line":578},[1987],{"type":48,"tag":201,"props":1988,"children":1989},{},[1990],{"type":53,"value":1991}," type = \"AWS_CLOUDWATCH\"\n",{"type":48,"tag":201,"props":1993,"children":1994},{"class":203,"line":588},[1995],{"type":48,"tag":201,"props":1996,"children":1997},{},[1998],{"type":53,"value":1999}," region = \"\u003Caws-region>\"\n",{"type":48,"tag":201,"props":2001,"children":2002},{"class":203,"line":597},[2003],{"type":48,"tag":201,"props":2004,"children":2005},{},[2006],{"type":53,"value":2007},"}\n",{"type":48,"tag":201,"props":2009,"children":2010},{"class":203,"line":618},[2011],{"type":48,"tag":201,"props":2012,"children":2013},{"emptyLinePlaceholder":582},[2014],{"type":53,"value":585},{"type":48,"tag":201,"props":2016,"children":2017},{"class":203,"line":650},[2018],{"type":48,"tag":201,"props":2019,"children":2020},{},[2021],{"type":53,"value":2022},"resource \"cockroach_metric_export_cloudwatch_config\" \"main\" {\n",{"type":48,"tag":201,"props":2024,"children":2025},{"class":203,"line":669},[2026],{"type":48,"tag":201,"props":2027,"children":2028},{},[2029],{"type":53,"value":1967},{"type":48,"tag":201,"props":2031,"children":2032},{"class":203,"line":1822},[2033],{"type":48,"tag":201,"props":2034,"children":2035},{},[2036],{"type":53,"value":2037}," role_arn = \"\u003Ciam-role-arn>\"\n",{"type":48,"tag":201,"props":2039,"children":2040},{"class":203,"line":1840},[2041],{"type":48,"tag":201,"props":2042,"children":2043},{},[2044],{"type":53,"value":2045}," target_region = \"\u003Caws-region>\"\n",{"type":48,"tag":201,"props":2047,"children":2049},{"class":203,"line":2048},13,[2050],{"type":48,"tag":201,"props":2051,"children":2052},{},[2053],{"type":53,"value":2007},{"type":48,"tag":56,"props":2055,"children":2056},{},[2057,2062,2064,2070],{"type":48,"tag":116,"props":2058,"children":2059},{},[2060],{"type":53,"value":2061},"Known Terraform issue:",{"type":53,"value":2063}," Creating a cluster with log export and CMEK in the same ",{"type":48,"tag":175,"props":2065,"children":2067},{"className":2066},[],[2068],{"type":53,"value":2069},"terraform apply",{"type":53,"value":2071}," can cause a race condition. Apply the cluster first, then add log export and CMEK configurations in a subsequent apply.",{"type":48,"tag":62,"props":2073,"children":2075},{"id":2074},"safety-considerations",[2076],{"type":53,"value":2077},"Safety Considerations",{"type":48,"tag":2079,"props":2080,"children":2081},"table",{},[2082,2106],{"type":48,"tag":2083,"props":2084,"children":2085},"thead",{},[2086],{"type":48,"tag":2087,"props":2088,"children":2089},"tr",{},[2090,2096,2101],{"type":48,"tag":2091,"props":2092,"children":2093},"th",{},[2094],{"type":53,"value":2095},"Impact Type",{"type":48,"tag":2091,"props":2097,"children":2098},{},[2099],{"type":53,"value":2100},"Severity",{"type":48,"tag":2091,"props":2102,"children":2103},{},[2104],{"type":53,"value":2105},"Recommendation",{"type":48,"tag":2107,"props":2108,"children":2109},"tbody",{},[2110,2129,2146,2164,2181],{"type":48,"tag":2087,"props":2111,"children":2112},{},[2113,2119,2124],{"type":48,"tag":2114,"props":2115,"children":2116},"td",{},[2117],{"type":53,"value":2118},"Log export enabling",{"type":48,"tag":2114,"props":2120,"children":2121},{},[2122],{"type":53,"value":2123},"Low",{"type":48,"tag":2114,"props":2125,"children":2126},{},[2127],{"type":53,"value":2128},"No impact on cluster operation",{"type":48,"tag":2087,"props":2130,"children":2131},{},[2132,2137,2141],{"type":48,"tag":2114,"props":2133,"children":2134},{},[2135],{"type":53,"value":2136},"Log export disabling",{"type":48,"tag":2114,"props":2138,"children":2139},{},[2140],{"type":53,"value":2123},{"type":48,"tag":2114,"props":2142,"children":2143},{},[2144],{"type":53,"value":2145},"Stops log delivery but does not affect cluster",{"type":48,"tag":2087,"props":2147,"children":2148},{},[2149,2154,2159],{"type":48,"tag":2114,"props":2150,"children":2151},{},[2152],{"type":53,"value":2153},"IAM misconfiguration",{"type":48,"tag":2114,"props":2155,"children":2156},{},[2157],{"type":53,"value":2158},"Medium",{"type":48,"tag":2114,"props":2160,"children":2161},{},[2162],{"type":53,"value":2163},"Log export will fail silently; monitor for delivery gaps",{"type":48,"tag":2087,"props":2165,"children":2166},{},[2167,2172,2176],{"type":48,"tag":2114,"props":2168,"children":2169},{},[2170],{"type":53,"value":2171},"Cost impact",{"type":48,"tag":2114,"props":2173,"children":2174},{},[2175],{"type":53,"value":2158},{"type":48,"tag":2114,"props":2177,"children":2178},{},[2179],{"type":53,"value":2180},"High-volume clusters can generate significant CloudWatch\u002Flogging costs",{"type":48,"tag":2087,"props":2182,"children":2183},{},[2184,2189,2193],{"type":48,"tag":2114,"props":2185,"children":2186},{},[2187],{"type":53,"value":2188},"Terraform race condition",{"type":48,"tag":2114,"props":2190,"children":2191},{},[2192],{"type":53,"value":2158},{"type":48,"tag":2114,"props":2194,"children":2195},{},[2196],{"type":53,"value":2197},"Apply cluster creation before log\u002FCMEK config",{"type":48,"tag":56,"props":2199,"children":2200},{},[2201],{"type":48,"tag":116,"props":2202,"children":2203},{},[2204],{"type":53,"value":2205},"Cost planning:",{"type":48,"tag":69,"props":2207,"children":2208},{},[2209,2214,2219,2224],{"type":48,"tag":73,"props":2210,"children":2211},{},[2212],{"type":53,"value":2213},"CockroachDB Cloud can generate 1-10 GB of logs per day per node depending on query volume and audit settings",{"type":48,"tag":73,"props":2215,"children":2216},{},[2217],{"type":53,"value":2218},"CloudWatch Logs pricing: ~$0.50\u002FGB ingestion + $0.03\u002FGB storage\u002Fmonth (varies by region)",{"type":48,"tag":73,"props":2220,"children":2221},{},[2222],{"type":53,"value":2223},"Enable log retention policies to control storage costs",{"type":48,"tag":73,"props":2225,"children":2226},{},[2227],{"type":53,"value":2228},"Audit logging significantly increases log volume — plan accordingly",{"type":48,"tag":56,"props":2230,"children":2231},{},[2232],{"type":48,"tag":116,"props":2233,"children":2234},{},[2235],{"type":53,"value":2236},"Do not:",{"type":48,"tag":69,"props":2238,"children":2239},{},[2240,2245,2250],{"type":48,"tag":73,"props":2241,"children":2242},{},[2243],{"type":53,"value":2244},"Delete the CloudWatch log group while log export is active (will cause delivery errors)",{"type":48,"tag":73,"props":2246,"children":2247},{},[2248],{"type":53,"value":2249},"Revoke IAM permissions without disabling log export first",{"type":48,"tag":73,"props":2251,"children":2252},{},[2253],{"type":53,"value":2254},"Enable cluster-wide SQL audit logging without considering the log volume increase",{"type":48,"tag":62,"props":2256,"children":2258},{"id":2257},"rollback",[2259],{"type":53,"value":2260},"Rollback",{"type":48,"tag":190,"props":2262,"children":2264},{"className":192,"code":2263,"language":194,"meta":195,"style":195},"# Disable log export\nccloud cluster log-export delete \u003Ccluster-id>\n\n# Disable metric export\nccloud cluster metric-export delete cloudwatch \u003Ccluster-id>\nccloud cluster metric-export delete datadog \u003Ccluster-id>\n",[2265],{"type":48,"tag":175,"props":2266,"children":2267},{"__ignoreMap":195},[2268,2276,2312,2319,2327,2366],{"type":48,"tag":201,"props":2269,"children":2270},{"class":203,"line":204},[2271],{"type":48,"tag":201,"props":2272,"children":2273},{"style":277},[2274],{"type":53,"value":2275},"# Disable log export\n",{"type":48,"tag":201,"props":2277,"children":2278},{"class":203,"line":29},[2279,2283,2287,2291,2296,2300,2304,2308],{"type":48,"tag":201,"props":2280,"children":2281},{"style":208},[2282],{"type":53,"value":211},{"type":48,"tag":201,"props":2284,"children":2285},{"style":214},[2286],{"type":53,"value":234},{"type":48,"tag":201,"props":2288,"children":2289},{"style":214},[2290],{"type":53,"value":800},{"type":48,"tag":201,"props":2292,"children":2293},{"style":214},[2294],{"type":53,"value":2295}," delete",{"type":48,"tag":201,"props":2297,"children":2298},{"style":242},[2299],{"type":53,"value":245},{"type":48,"tag":201,"props":2301,"children":2302},{"style":214},[2303],{"type":53,"value":814},{"type":48,"tag":201,"props":2305,"children":2306},{"style":253},[2307],{"type":53,"value":819},{"type":48,"tag":201,"props":2309,"children":2310},{"style":242},[2311],{"type":53,"value":575},{"type":48,"tag":201,"props":2313,"children":2314},{"class":203,"line":25},[2315],{"type":48,"tag":201,"props":2316,"children":2317},{"emptyLinePlaceholder":582},[2318],{"type":53,"value":585},{"type":48,"tag":201,"props":2320,"children":2321},{"class":203,"line":550},[2322],{"type":48,"tag":201,"props":2323,"children":2324},{"style":277},[2325],{"type":53,"value":2326},"# Disable metric export\n",{"type":48,"tag":201,"props":2328,"children":2329},{"class":203,"line":578},[2330,2334,2338,2342,2346,2350,2354,2358,2362],{"type":48,"tag":201,"props":2331,"children":2332},{"style":208},[2333],{"type":53,"value":211},{"type":48,"tag":201,"props":2335,"children":2336},{"style":214},[2337],{"type":53,"value":234},{"type":48,"tag":201,"props":2339,"children":2340},{"style":214},[2341],{"type":53,"value":1244},{"type":48,"tag":201,"props":2343,"children":2344},{"style":214},[2345],{"type":53,"value":2295},{"type":48,"tag":201,"props":2347,"children":2348},{"style":214},[2349],{"type":53,"value":1253},{"type":48,"tag":201,"props":2351,"children":2352},{"style":242},[2353],{"type":53,"value":245},{"type":48,"tag":201,"props":2355,"children":2356},{"style":214},[2357],{"type":53,"value":814},{"type":48,"tag":201,"props":2359,"children":2360},{"style":253},[2361],{"type":53,"value":819},{"type":48,"tag":201,"props":2363,"children":2364},{"style":242},[2365],{"type":53,"value":575},{"type":48,"tag":201,"props":2367,"children":2368},{"class":203,"line":588},[2369,2373,2377,2381,2385,2389,2393,2397,2401],{"type":48,"tag":201,"props":2370,"children":2371},{"style":208},[2372],{"type":53,"value":211},{"type":48,"tag":201,"props":2374,"children":2375},{"style":214},[2376],{"type":53,"value":234},{"type":48,"tag":201,"props":2378,"children":2379},{"style":214},[2380],{"type":53,"value":1244},{"type":48,"tag":201,"props":2382,"children":2383},{"style":214},[2384],{"type":53,"value":2295},{"type":48,"tag":201,"props":2386,"children":2387},{"style":214},[2388],{"type":53,"value":1373},{"type":48,"tag":201,"props":2390,"children":2391},{"style":242},[2392],{"type":53,"value":245},{"type":48,"tag":201,"props":2394,"children":2395},{"style":214},[2396],{"type":53,"value":814},{"type":48,"tag":201,"props":2398,"children":2399},{"style":253},[2400],{"type":53,"value":819},{"type":48,"tag":201,"props":2402,"children":2403},{"style":242},[2404],{"type":53,"value":575},{"type":48,"tag":56,"props":2406,"children":2407},{},[2408],{"type":53,"value":2409},"Log export can be re-enabled at any time with the same or different configuration. Historical logs are not re-sent — only new logs are exported after re-enabling.",{"type":48,"tag":62,"props":2411,"children":2413},{"id":2412},"references",[2414],{"type":53,"value":2415},"References",{"type":48,"tag":56,"props":2417,"children":2418},{},[2419],{"type":48,"tag":116,"props":2420,"children":2421},{},[2422],{"type":53,"value":2423},"Skill references:",{"type":48,"tag":69,"props":2425,"children":2426},{},[2427],{"type":48,"tag":73,"props":2428,"children":2429},{},[2430],{"type":48,"tag":703,"props":2431,"children":2432},{"href":705},[2433],{"type":53,"value":2434},"Cloud provider IAM setup",{"type":48,"tag":56,"props":2436,"children":2437},{},[2438],{"type":48,"tag":116,"props":2439,"children":2440},{},[2441],{"type":53,"value":2442},"Related skills:",{"type":48,"tag":69,"props":2444,"children":2445},{},[2446,2457],{"type":48,"tag":73,"props":2447,"children":2448},{},[2449,2455],{"type":48,"tag":703,"props":2450,"children":2452},{"href":2451},"..\u002Fconfiguring-audit-logging\u002FSKILL.md",[2453],{"type":53,"value":2454},"configuring-audit-logging",{"type":53,"value":2456}," — Enable SQL audit logging (must be enabled for audit logs to appear in export)",{"type":48,"tag":73,"props":2458,"children":2459},{},[2460,2466],{"type":48,"tag":703,"props":2461,"children":2463},{"href":2462},"..\u002Fauditing-cloud-cluster-security\u002FSKILL.md",[2464],{"type":53,"value":2465},"auditing-cloud-cluster-security",{"type":53,"value":2467}," — Run a full security posture audit",{"type":48,"tag":56,"props":2469,"children":2470},{},[2471],{"type":48,"tag":116,"props":2472,"children":2473},{},[2474],{"type":53,"value":2475},"Official CockroachDB Documentation:",{"type":48,"tag":69,"props":2477,"children":2478},{},[2479,2490,2500],{"type":48,"tag":73,"props":2480,"children":2481},{},[2482],{"type":48,"tag":703,"props":2483,"children":2487},{"href":2484,"rel":2485},"https:\u002F\u002Fwww.cockroachlabs.com\u002Fdocs\u002Fcockroachcloud\u002Fexport-logs.html",[2486],"nofollow",[2488],{"type":53,"value":2489},"Export Logs From a CockroachDB Cloud Cluster",{"type":48,"tag":73,"props":2491,"children":2492},{},[2493],{"type":48,"tag":703,"props":2494,"children":2497},{"href":2495,"rel":2496},"https:\u002F\u002Fwww.cockroachlabs.com\u002Fdocs\u002Fcockroachcloud\u002Fexport-metrics.html",[2486],[2498],{"type":53,"value":2499},"Export Metrics From a CockroachDB Cloud Cluster",{"type":48,"tag":73,"props":2501,"children":2502},{},[2503],{"type":48,"tag":703,"props":2504,"children":2507},{"href":2505,"rel":2506},"https:\u002F\u002Fwww.cockroachlabs.com\u002Fdocs\u002Fcockroachcloud\u002Fcloud-api.html",[2486],[2508],{"type":53,"value":2509},"Cloud API — Log Export",{"type":48,"tag":2511,"props":2512,"children":2513},"style",{},[2514],{"type":53,"value":2515},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":2517,"total":2677},[2518,2537,2553,2568,2579,2589,2602,2614,2628,2641,2651,2664],{"slug":2519,"name":2519,"fn":2520,"description":2521,"org":2522,"tags":2523,"stars":2534,"repoUrl":2535,"updatedAt":2536},"collecting-cockroachdb-operator-escalation-packet","collect CockroachDB operator escalation packets","Collects a complete CockroachDB Operator escalation packet for TSC\u002FTSE or operator-team handoff, including Helm state, Kubernetes resources, logs, operation-specific evidence, pprof goroutine dumps, metrics, and a customer action timeline. Use when general diagnosis cannot resolve an operator-managed CockroachDB Helm issue or before restarting a stuck operator.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2524,2527,2530,2533],{"name":2525,"slug":2526,"type":15},"Database","database",{"name":2528,"slug":2529,"type":15},"Incident Response","incident-response",{"name":2531,"slug":2532,"type":15},"Kubernetes","kubernetes",{"name":17,"slug":18,"type":15},105,"https:\u002F\u002Fgithub.com\u002Fcockroachdb\u002Fhelm-charts","2026-07-12T07:57:25.288146",{"slug":2538,"name":2538,"fn":2539,"description":2540,"org":2541,"tags":2542,"stars":2534,"repoUrl":2535,"updatedAt":2552},"configuring-cockroachdb-helm-tls","configure TLS for CockroachDB Helm charts","Selects and validates TLS settings for CockroachDB Helm chart deployments, including self-signer, cert-manager, and external certificate modes. Use when a customer needs secure CockroachDB Helm values, certificate secret mapping, cert-manager integration, or TLS install troubleshooting before deploying the chart.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2543,2546,2549],{"name":2544,"slug":2545,"type":15},"Deployment","deployment",{"name":2547,"slug":2548,"type":15},"Encryption","encryption",{"name":2550,"slug":2551,"type":15},"Security","security","2026-07-12T07:56:37.675396",{"slug":2554,"name":2554,"fn":2555,"description":2556,"org":2557,"tags":2558,"stars":2534,"repoUrl":2535,"updatedAt":2567},"debugging-cockroachdb-operator-migrations","debug CockroachDB Operator migration scenarios","Debugs CockroachDB Operator migration scenarios, including Helm StatefulSet to v1beta1 CrdbNode migration and public operator v1alpha1 to v1beta1 migration. Use when migration labels, migration phases, source StatefulSet ownership, converted CRDs, PVC ownership, or post-migration reconciliation are unclear or stuck.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2559,2560,2563,2564],{"name":2525,"slug":2526,"type":15},{"name":2561,"slug":2562,"type":15},"Debugging","debugging",{"name":2531,"slug":2532,"type":15},{"name":2565,"slug":2566,"type":15},"Migration","migration","2026-07-12T07:56:48.360871",{"slug":2569,"name":2569,"fn":2570,"description":2571,"org":2572,"tags":2573,"stars":2534,"repoUrl":2535,"updatedAt":2578},"diagnosing-cockroachdb-helm-deployments","diagnose CockroachDB Helm chart deployments","Diagnoses failed or unhealthy CockroachDB Helm chart deployments by checking Helm release state, operator health, CrdbCluster and CrdbNode status, pod readiness, RBAC, webhooks, TLS, upgrades, scaling, PVCs, DNS, and multi-region assumptions. Use when Helm install or upgrade fails, pods are not Ready, or the operator is not reconciling.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2574,2575,2576,2577],{"name":2525,"slug":2526,"type":15},{"name":2561,"slug":2562,"type":15},{"name":2544,"slug":2545,"type":15},{"name":2531,"slug":2532,"type":15},"2026-07-12T07:57:24.018818",{"slug":2580,"name":2580,"fn":2581,"description":2582,"org":2583,"tags":2584,"stars":2534,"repoUrl":2535,"updatedAt":2588},"installing-cockroachdb-with-helm","install CockroachDB using Helm","Guides customer-facing installation of CockroachDB on Kubernetes using the CockroachDB split Helm charts and operator-managed v1beta1 resources. Use when installing CockroachDB with Helm, choosing between published and local split charts, verifying a new install, or helping an agent complete first-time Kubernetes onboarding.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2585,2586,2587],{"name":2525,"slug":2526,"type":15},{"name":2544,"slug":2545,"type":15},{"name":2531,"slug":2532,"type":15},"2026-07-12T07:56:45.777567",{"slug":2590,"name":2590,"fn":2591,"description":2592,"org":2593,"tags":2594,"stars":2534,"repoUrl":2535,"updatedAt":2601},"validating-cockroachdb-helm-multiregion","validate CockroachDB multi-region Helm deployments","Validates CockroachDB Helm chart values and Kubernetes prerequisites for operator-managed multi-region deployments. Use before adding a region, deploying CockroachDB across multiple Kubernetes clusters, checking region DNS domains, or confirming that all regions share certificate and networking assumptions.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2595,2596,2597,2598],{"name":2525,"slug":2526,"type":15},{"name":2544,"slug":2545,"type":15},{"name":2531,"slug":2532,"type":15},{"name":2599,"slug":2600,"type":15},"Operations","operations","2026-07-12T07:56:47.082609",{"slug":2603,"name":2603,"fn":2604,"description":2605,"org":2606,"tags":2607,"stars":25,"repoUrl":26,"updatedAt":2613},"analyzing-range-distribution","analyze CockroachDB range distribution and health","Analyzes CockroachDB range distribution across tables and indexes using SHOW RANGES to identify range count, size patterns, leaseholder placement, and replication health. Use when investigating hotspots, uneven data distribution, range fragmentation, or validating zone configuration effects without DB Console access.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2608,2609,2610],{"name":2525,"slug":2526,"type":15},{"name":17,"slug":18,"type":15},{"name":2611,"slug":2612,"type":15},"Performance","performance","2026-07-12T07:57:18.753533",{"slug":2615,"name":2615,"fn":2616,"description":2617,"org":2618,"tags":2619,"stars":25,"repoUrl":26,"updatedAt":2627},"analyzing-schema-change-storage-risk","analyze schema change storage requirements","Estimates storage requirements for CockroachDB online schema change backfills using SHOW RANGES WITH DETAILS, KEYS, INDEXES. Use before CREATE INDEX, ADD COLUMN with INDEX\u002FUNIQUE, ALTER PRIMARY KEY, CREATE MATERIALIZED VIEW, CREATE TABLE AS, REFRESH, or SET LOCALITY on tables with large per-index footprints, to avoid mid-backfill disk exhaustion.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2620,2623,2624,2625],{"name":2621,"slug":2622,"type":15},"Data Modeling","data-modeling",{"name":2525,"slug":2526,"type":15},{"name":2611,"slug":2612,"type":15},{"name":2626,"slug":1879,"type":15},"SQL","2026-07-12T07:57:22.763788",{"slug":2629,"name":2629,"fn":2630,"description":2631,"org":2632,"tags":2633,"stars":25,"repoUrl":26,"updatedAt":2640},"auditing-cis-benchmark","audit CockroachDB clusters against CIS benchmarks","Audits a self-hosted CockroachDB cluster against the CIS CockroachDB Benchmark v1.0.0 Level 1 controls. Supports two audit depths — quick automated scans and full CIS audit procedures. Produces a structured PASS\u002FFAIL\u002FMANUAL report covering installation, system hardening, logging, user access, data protection, and CockroachDB settings. Use when preparing for CIS compliance assessments, hardening self-hosted deployments, or validating security posture against industry benchmarks.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2634,2635,2638,2639],{"name":23,"slug":24,"type":15},{"name":2636,"slug":2637,"type":15},"Compliance","compliance",{"name":2525,"slug":2526,"type":15},{"name":2550,"slug":2551,"type":15},"2026-07-18T05:48:00.862384",{"slug":2465,"name":2465,"fn":2642,"description":2643,"org":2644,"tags":2645,"stars":25,"repoUrl":26,"updatedAt":2650},"audit CockroachDB cluster security posture","Audits the security posture of a CockroachDB cluster (Cloud or self-hosted) across network, authentication, authorization, encryption, audit logging, and backup dimensions. Use when assessing cluster security readiness, preparing for compliance reviews, or investigating security configuration gaps.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2646,2647,2648,2649],{"name":23,"slug":24,"type":15},{"name":2525,"slug":2526,"type":15},{"name":2599,"slug":2600,"type":15},{"name":2550,"slug":2551,"type":15},"2026-07-12T07:57:01.506735",{"slug":2652,"name":2652,"fn":2653,"description":2654,"org":2655,"tags":2656,"stars":25,"repoUrl":26,"updatedAt":2663},"auditing-table-statistics","audit optimizer table statistics","Audits optimizer table statistics for staleness, missing coverage, and data quality issues using SHOW STATISTICS. Use when diagnosing poor query performance, unexpected plan changes, or after bulk data changes to identify stale statistics requiring refresh via CREATE STATISTICS.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2657,2658,2661,2662],{"name":23,"slug":24,"type":15},{"name":2659,"slug":2660,"type":15},"Data Analysis","data-analysis",{"name":2525,"slug":2526,"type":15},{"name":2611,"slug":2612,"type":15},"2026-07-12T07:57:16.190081",{"slug":2665,"name":2665,"fn":2666,"description":2667,"org":2668,"tags":2669,"stars":25,"repoUrl":26,"updatedAt":2676},"benchmarking-transaction-patterns","benchmark CockroachDB transaction patterns","Guides benchmarking and comparing explicit multi-statement transactions versus single-statement CTE transactions in CockroachDB, with fair test methodology, contention analysis, and performance interpretation. Use when comparing transaction formulations, benchmarking CockroachDB workloads under contention, investigating retry pressure, or deciding whether to rewrite multi-step application flows into single SQL statements.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2670,2671,2674,2675],{"name":2525,"slug":2526,"type":15},{"name":2672,"slug":2673,"type":15},"Engineering","engineering",{"name":2611,"slug":2612,"type":15},{"name":2626,"slug":1879,"type":15},"2026-07-12T07:57:26.543278",40,{"items":2679,"total":2731},[2680,2686,2693,2700,2707,2714,2721],{"slug":2603,"name":2603,"fn":2604,"description":2605,"org":2681,"tags":2682,"stars":25,"repoUrl":26,"updatedAt":2613},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2683,2684,2685],{"name":2525,"slug":2526,"type":15},{"name":17,"slug":18,"type":15},{"name":2611,"slug":2612,"type":15},{"slug":2615,"name":2615,"fn":2616,"description":2617,"org":2687,"tags":2688,"stars":25,"repoUrl":26,"updatedAt":2627},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2689,2690,2691,2692],{"name":2621,"slug":2622,"type":15},{"name":2525,"slug":2526,"type":15},{"name":2611,"slug":2612,"type":15},{"name":2626,"slug":1879,"type":15},{"slug":2629,"name":2629,"fn":2630,"description":2631,"org":2694,"tags":2695,"stars":25,"repoUrl":26,"updatedAt":2640},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2696,2697,2698,2699],{"name":23,"slug":24,"type":15},{"name":2636,"slug":2637,"type":15},{"name":2525,"slug":2526,"type":15},{"name":2550,"slug":2551,"type":15},{"slug":2465,"name":2465,"fn":2642,"description":2643,"org":2701,"tags":2702,"stars":25,"repoUrl":26,"updatedAt":2650},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2703,2704,2705,2706],{"name":23,"slug":24,"type":15},{"name":2525,"slug":2526,"type":15},{"name":2599,"slug":2600,"type":15},{"name":2550,"slug":2551,"type":15},{"slug":2652,"name":2652,"fn":2653,"description":2654,"org":2708,"tags":2709,"stars":25,"repoUrl":26,"updatedAt":2663},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2710,2711,2712,2713],{"name":23,"slug":24,"type":15},{"name":2659,"slug":2660,"type":15},{"name":2525,"slug":2526,"type":15},{"name":2611,"slug":2612,"type":15},{"slug":2665,"name":2665,"fn":2666,"description":2667,"org":2715,"tags":2716,"stars":25,"repoUrl":26,"updatedAt":2676},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2717,2718,2719,2720],{"name":2525,"slug":2526,"type":15},{"name":2672,"slug":2673,"type":15},{"name":2611,"slug":2612,"type":15},{"name":2626,"slug":1879,"type":15},{"slug":2722,"name":2722,"fn":2723,"description":2724,"org":2725,"tags":2726,"stars":25,"repoUrl":26,"updatedAt":2730},"cockroachdb-sql","write and optimize CockroachDB SQL","Use when writing, generating, or optimizing SQL for CockroachDB, designing CockroachDB schemas, or when the user asks about CockroachDB-specific SQL patterns, type mappings, and distributed database best practices. Also use when encountering CockroachDB anti-patterns like missing primary keys, sequential ID hotspots, or incorrect type usage.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2727,2728,2729],{"name":2525,"slug":2526,"type":15},{"name":2611,"slug":2612,"type":15},{"name":2626,"slug":1879,"type":15},"2026-07-25T05:31:22.562808",34]