By default, ActionTrail records the events that are generated within your Alibaba Cloud account in the last 90 days. To query events that are generated more than 90 days ago, you must create a trail to deliver events to Simple Log Service or Object Storage Service (OSS) in advance. Then, you can log on to the Simple Log Service console or OSS console to query the delivered events.
Prerequisites
A trail is created, and events are delivered to Simple Log Service or OSS. For more information, see Create a single-account trail and Create a multi-account trail.
Procedure
Log on to the ActionTrail console.
In the left-side navigation pane, click Trails.
On the Trails page, find the trail that you created, move the pointer over the information in the Storage Service column, and then click the name of the Simple Log Service Logstore or OSS bucket.
Query events in the Simple Log Service console: Click the name of the Simple Log Service Logstore to query or analyze the events that are delivered to the Logstore in the Simple Log Service console.
Query events in the OSS console: Click the name of the OSS bucket. Then, choose . Find the event storage path and download the events to your computer for analysis. For more information, see What is the storage path of an event that is delivered to an OSS bucket?.
NoteIf you want to query and analyze the events that are delivered to an OSS bucket, you can import the events from the OSS bucket to Simple Log Service for query and analysis. For more information, see Import data from OSS to Simple Log Service and Query and analyze logs.