Query logs

A query log provides a log of queries executed on an instance within a specified time range.

You can export query logs from an Aura instance via the Logs tab.

To access the Logs tab:

  1. Navigate to the Neo4j Aura Console in your browser.

  2. Select the instance you want to export the query logs from.

  3. Select the Logs tab.

Requesting query logs

To request a query log from the Logs tab:

  1. Click Request log.

  2. Select a Range option.

  3. Click Request.

You can select from the following time ranges when requesting a query log:

  • Last 15 minutes

  • Last hour

  • Custom range - Any range up to one hour from the previous 30 days

We recommend shorter time ranges for busy, read/write heavy instances to reduce request time.

Aura will generate a query log for your selected time range, available to download once the Status shows Completed.

Requested query logs will appear for up to 7 days, at which point they will expire and be removed.

Downloading query logs

You can download query logs with the Completed Status by selecting the download icon on the right-hand side of the Query log entry.

Downloaded query logs take the form of a zipped JSON file that, when extracted, contains the following information for each query:

Table 1. Query log entries
Name Description


The number of bytes allocated by the query.


The metadata attached to the transaction.


The name of the user who executed the query (whose credentials were used to log in).


The name of the database the query was executed on.


The ID of the instace the query was executed on.


The time the query took to complete in milliseconds.


The query event:

start - The query was successfully parsed, awaiting execution.

fail - The query failed to either parse or execute.

success - The query executed successfully or was canceled.


The name of the user who executed the query either through authentication (authenticatedUser) or through impersonation.


The ID of the query.


The log message: a truncated version of query.


The number of page faults resulting from the query.


The number of page hits resulting from the query.


The full query text.


The Cypher runtime used to execute the query.


The connection details of the query.


The type of log message.


The timestamp of the query log message.