You can create a trail for the Inner-ActionTrail feature to deliver Alibaba Cloud-initiated events to Simple Log Service for auditing and monitoring. Then, you can analyze the events in Simple Log Service. This topic describes how to manage a trail for the Inner-ActionTrail feature.
Prerequisites
The Inner-ActionTrail feature is enabled. For more information, see Enable the inner-ActionTrail feature.
Create a trail
Log on to the ActionTrail console.
In the left-side navigation pane, choose .
In the Trail Basic Settings step, configure the Trail Name parameter and click Next.
In the Event Delivery Settings step, select Delivery to Log Service, specify a project, and then click Next.
New Project: If you select this option, select a region from the Logstore Region drop-down list and configure the Project Name parameter.
Existing Project: If you select this option, select a region from the Logstore Region drop-down list and a project from the Project Name drop-down list.
In the Preview and Create step, confirm the information about the trail and click Submit.
Result
ActionTrail automatically creates a Logstore whose name is in the innertrail_<Trail name> format and also the indexes and charts for the Alibaba Cloud-initiated events. You can find the created trail on the Trails page and click Log Analysis in the Log Service column to analyze the events or click Log Reports in the column to view the distribution charts of the events.
For more information about the fields in Alibaba Cloud-initiated events, see Fields in Alibaba Cloud-initiated events.
Modify a trail
Log on to the ActionTrail console.
In the left-side navigation pane, choose .
On the page that appears, find the trail that you want to modify and click the trail name.
On the page that appears, click the
icon in the upper-right corner of the Trail Basic Settings section. In the Trail Basic Settings step, configure the Trail Name parameter and click Next.
In the Event Delivery Settings step, select Delivery to Log Service, specify a project, and then click Next.
New Project: If you select this option, select a region from the Logstore Region drop-down list and configure the Project Name parameter.
Existing Project: If you select this option, select a region from the Logstore Region drop-down list and a project from the Project Name drop-down list.
In the Preview and Create step, confirm the new information about the trail and click Submit.
Delete a trail
Log on to the ActionTrail console.
In the left-side navigation pane, choose .
On the page that appears, find the trail that you want to delete and click Delete in the Actions column.
In the message that appears, click Confirm.
NoteAlibaba Cloud-initiated events that are delivered to Simple Log Service are not deleted.
Disable a trail
After you disable a trail, ActionTrail no longer delivers Alibaba Cloud-initiated events to the automatically created Logstore. However, ActionTrail retains the existing parameter settings.
Log on to the ActionTrail console.
In the left-side navigation pane, choose .
On the Trails page, find the trail that you want to disable and click the trail name.
On the page that appears, turn off Status.
In the Disable Trail message, click OK.
NoteIf you want to enable the trail again, turn on Status.
References
After Alibaba Cloud-initiated events are delivered to Simple Log Service, you can query and analyze, download, ship, transform, and configure alerts for the related logs in Simple Log Service. For more information, see Common operations on logs of Alibaba Cloud services.