ApsaraDB for SelectDB is integrated with Alibaba Cloud ActionTrail. You can use ActionTrail to view behavioral logs and deliver the logs to Simple Log Service Logstores or Object Storage Service (OSS) buckets to meet your requirements, such as real-time log audit and issue tracing and analysis. This topic describes how to view the operations that are recorded by ActionTrail in ApsaraDB for SelectDB.
Limits
You can use ActionTrail to query only the events that are delivered by single-account trails.
NoteIf you want to query the events that are delivered by multi-account trails, you can configure ActionTrail to deliver these events to Simple Log Service Logstores or OSS buckets and then perform queries in Simple Log Service or OSS. For more information, see Create a multi-account trail.
ActionTrail tracks the operations that are performed in the previous 90 days in a region and records these operations as events.
NoteIf you want to query the events that were recorded more than 90 days ago, you must create a single-account trail and deliver the events to the corresponding Simple Log Service Logstore or OSS bucket. For more information, see Create a single-account trail.
If you want to query the events that were recorded more than 90 days ago in multiple regions at a time, or specify multiple search conditions to filter and query events, you can use the advanced event query feature. For more information, see Perform custom event queries.
ActionTrail records an operation as an event 10 minutes after you perform the operation in ApsaraDB for SelectDB.
After an event is generated within your Alibaba Cloud account, you must wait 10 minutes before you can query the event in the ActionTrail console.
Billing
You do not need to activate ActionTrail. ActionTrail is automatically activated. If your Alibaba Cloud account has passed real-name verification and has no overdue payments, you can use the account to log on to the ActionTrail console.
You can use ActionTrail free of charge.
ImportantActionTrail will charge fees for specific features in the future. If you use such features, ActionTrail will send notifications to you one month before you are charged fees for the features.
If you use ActionTrail to create trails and deliver events to Simple Log Service Logstores or OSS buckets, you are charged based on the billing rules of Simple Log Service or OSS.
For more information about the billing rules of Simple Log Service, see Billing overview of Simple Log Service.
For more information about the billing rules of OSS, see Billing overview of OSS.
Procedure
Log on to the ApsaraDB for SelectDB console.
In the top navigation bar, select the region in which the instance that you want to manage resides.
In the left-side navigation pane, click Instances. On the Instances page, find the instance and click its ID to go to the Instance Details page.
In the upper-right corner of the Instance Details page, click Management Operation Audit. You are navigated to the Event Query page in the ActionTrail console.
On the Event Query page, the operations that are performed in ApsaraDB for SelectDB are displayed as events. Select an appropriate query method based on the scenarios that are described in the following table.
Scenario Query method References Query management events that were generated in the last 90 days Perform event detail queries. You can perform event detail queries to query management events that were generated in the last 90 days. You can specify only one filter condition for each event detail query.
Query events in the ActionTrail console Query statistics collected at intervals of 2 hours for management events that were generated in the last 90 days Perform event summary queries. You can perform event summary queries to query the statistics collected at intervals of 2 hours for management events that were generated in the last 90 days. This helps improve the online query efficiency of events. You can specify only one filter condition for each event summary query.
Event summary query Query events that were generated more than 90 days ago Perform advanced event queries. If you enable the advanced event query feature for an existing trail, you can perform advanced event queries to query management events and insight events that were generated both in the last 90 days and more than 90 days ago. You can specify multiple filter conditions for each advanced event query.
Perform custom event queries Query exceptional operations that were performed in the last 90 days Perform insight event queries. You can perform insight event queries to query exceptional operations that were performed in specific scenarios in the last 90 days. You can specify only one filter condition for each insight event query. For example, an IPInsight event helps you gain an insight into an operation that was performed from an unusual IP address and identify potential risks at the earliest opportunity. You can perform online queries of IPInsight events that were generated in the last 90 days.
Query Insights events in the ActionTrail console
References
For more information about Alibaba Cloud ActionTrail, see What is ActionTrail?