All Products
Search
Document Center

EventBridge:Query and analyze events in the system event bus

Last Updated:Mar 11, 2026

This topic describes how to query and analyze Alibaba Cloud service events in the system event bus. Event analysis lets you query these events by schema and key-value conditions, apply aggregate functions, and visualize results as charts or tables.

Prerequisites

Before you begin, make sure that you have:

Enable event analysis

  1. Log on to the EventBridge console. In the left-side navigation pane, click Event Buses.

  2. In the top navigation bar, select a region.

  3. On the Event Bus page, find the system event bus and click Details in the Actions column.

  4. In the Basic Information section of the Event Bus Overview page, turn on Event Analysis.

  5. In the Note message, click OK.

Query and analyze events

  1. Log on to the EventBridge console. In the left-side navigation pane, choose Event Center > Event Analysis.

  2. In the top navigation bar, select a region.

  3. On the Event Analysis page, configure the following query parameters and click Query.

    Event analysis query parameters

Query parameters

ParameterRequiredDescription
Event BusYesThe name of the event bus whose events you want to query.
SchemaYesThe event type schema to query. Each schema corresponds to a specific type of Alibaba Cloud service event. For a list of supported event types, see Alibaba Cloud service event sources.
Key-value MatchNoOne or more key-value pairs to filter events. Supported operators: = (equals), != (not equals), exists, and does-not-exist. Select AND or OR to define the relationship between multiple key-value pairs.
Aggregate FunctionNoAn aggregate function for data visualization. Each aggregate function produces a separate line chart. Required for chart-based results on the Aggregate Function tab.
Grouped ByNoOne or more event property fields to group results by.
Ordered ByNoOne or more fields to sort results by, in ascending or descending order based on the specified aggregate functions. Required for table-based results on the Table tab.
Time RangeNoThe time range for the query.
Number of EventsNoThe maximum number of events to return.

View query results

Results appear on two tabs: Aggregate Function and Table. Each tab serves a different analysis purpose.

Aggregate Function tab

Use this tab to identify trends and patterns over time.

  • Y-axis: Aggregate values and units.

  • X-axis: Time.

  • Lines: Each color represents a different resource item. For example, querying Container Service for Kubernetes (ACK) events produces separate lines for Deployments, ReplicaSets, and StatefulSets. For details on these resource types, see Concepts.

This tab requires the Aggregate Function parameter to be configured.
Aggregate function chart

Table tab

Use this tab to drill into individual events. The table includes:

  • Event ID

  • Event bus name

  • Event publish time

Click an event to view its details and trace. For more information, see Event query overview.

This tab requires the Ordered By parameter to be configured.
Event analysis table

Limits

Event analysis supports only event schemas in the OpenAPI 3.0 format.

What's next