It might take up to 10 minutes for an event to appear in the audit log. There is a period of latency between the action and the logging of the event.
Most data connector activities are captured as job events. No logged job action exists for exporting data in a query.
In the Premium audit log, you can see job result download as an event. If you download a result, for example as a csv or tsv, it is recorded as job_result_download
event. You can also see preview of job results as an event: job_result_show
event.
Job events cover several data connector activities as well as Hive and Presto queries.
In some cases audit log and audit trail are used interchangeably. Generally:
Audit Logs tell you what an actor (user or entity) did. The log monitors who did what, and when.
Audit Trails tell you what sequence of actions occurred for a certain state to be created. You use trails confirm how and why the system or the data is in a certain state.
Treasure Data offers audit logs, not audit trails.