This topic describes the fields of operations logs collected by using the inner-ActionTrail feature.

Field Description
EventID The unique ID of the event.
EventVersion The version of the API. Valid value: 1.0.0.
EventProduct The name of the service on which an operation is performed, for example, OSS.
EventName The name of the event that occurs when you call an API operation on a cloud service, for example, Set Bucket Quota Limit.
EventDescription The description of the event. The description includesthe ID of the ticket, ticket ID of internal xxx or change, and ID of the security scanning task.
EventType The event type. Valid values:

    Technical support initiated by Alibaba Cloud O&M personnel, for example, troubleshooting based on tickets submitted by customers.


    The operations that are initiated by Alibaba Cloud employees or systems based on O&M requirements. For example, a bucket is migrated to another cluster after the cluster hardware is out of warranty.


    The operations performed on the public data of users and initiated by Alibaba Cloud employees or systems based on rules and regulations.

EventMethod The method used to call the API operation. For example, use the API, an SDK, or the console to read/write data and perform backup recovery.
ResourceType The type of the event-associated resource, such as Acs::Oss::Bucket.
ResourceID The ID of the resource. For example, OSS bucket ID.
ResourceRegionID The ID of the region to which the event-associated resource belongs.
ResourceOwnerID The ID of the Alibaba Cloud account to which the associated resource belongs.
EventAdditionalDetail The additional information about the event.
EventTime The time when the event-associated operation is performed. The time is in UTC, for example, 2019-09-18T05:23:37Z.
EventLevel The severity level of the event. Valid values:
  • NOTICE: records the event in a log file.
  • WARNING: records the event in a log file and send an alert notification to users.