All Products
Search

This Product

    :Subscribe to audit log reports

    Document Center

    :Subscribe to audit log reports

    Last Updated:Sep 03, 2024

    You can subscribe to audit log reports of a Tair instance by email or DingTalk. This allows you to periodically receive updates on the status of the Tair instance.

    Prerequisites

    • The audit log feature is enabled. For more information, see Enable the audit log feature.

    • The RAM user that you use to access audit logs has the permissions to access Simple Log Service.

      • You can attach the AliyunLogReadOnlyAccess or AliyunLogFullAccess system policy to a RAM user. After the policy is attached, the RAM user can view all Logstores. For more information, see Grant permissions to a RAM user.

      • You can also customize a policy to allow a RAM user to view only the audit logs of Tair.

        Custom policy example

        {
 "Version": "1",
 "Statement": [
  {
        "Action": [
          "log:Get*",
          "log:List*"
        ],
   "Resource": "acs:log:*:*:project/nosql-*",
   "Effect": "Allow"
  }
 ]
}

    Procedure

    1. Log on to the Tair console and go to the Instances page. In the top navigation bar, select the region in which the instance that you want to manage resides. Then, find the instance and click the instance ID.

    2. In the left-side navigation pane, choose Logs > Audit Logs.

    3. On the Audit Logs page, choose Subscribe > Create in the upper-right corner.

    4. In the Create Subscription panel, configure the parameters and click Next in the lower part of the page.

      The following table describes the parameters.

      Parameter

      Description

      Subscription Name

      The subscription name. You can specify this parameter based on your business needs.

      Frequency

      The frequency at which to send the audit log reports.

      Global Time

      The time range during which the audit logs to be sent are generated. Valid values: Default and Custom. If you set this parameter to Custom, you must configure one of the following parameters:

      • Relative: the time range to the current time. For example, if the current time is 19:20:31 and 1 Hour is selected as the relative time range, Tair sends the audit logs that are generated from 18:20:31 to 19:20:31.

      • Time Frame: the time range to the current time on the hour. For example, if the current time is 19:20:31 and 1 Hour is selected as the time frame, Tair sends the audit logs that are generated from 18:00:00 to 19:00:00.

      • Custom: a custom time range during which the audit logs to be sent are generated.

      Add Watermark

      Specifies whether to enable the watermark feature to add watermarks to the images in the audit log reports. The watermarks can be email addresses or webhook URLs.

      Use SQL Enhancement

      If the amount of log data is large, you can use the SQL enhancement feature provided by Simple Log Service. You can increase the amount of data that can be analyzed in a single query request by adding computing resources. For more information, see Enable Dedicated SQL.

    5. In the Notification step, click the drop-down list on the right and select a notification method.

      Valid values include Email and multiple webhook chatbots. You can select multiple notification methods.

      Note

      For information about how to obtain webhook URLs, see DingTalk chatbot webhooks.

    6. Specify the recipients of the notifications and click Submit in the lower part of the panel.