This topic describes how to query historical events in the ActionTrail console. By default, ActionTrail allows you to query the events that are recorded within your Alibaba Cloud account in the last 90 days.

Note You can query historical events only for a single-account trail in the ActionTrail console. The events can be queried at most twice per second. You cannot query historical events for a multi-account trail in the ActionTrail console. You can query such events only in the corresponding Object Storage Service (OSS) bucket or Log Service Logstore.

Procedure

  1. Log on to the ActionTrail console.
  2. In the top navigation bar, select the region where the events you want to query occurred from the drop-down list.
  3. In the left-side navigation pane, choose ActionTrail > Query Event Details. On the page that appears, query and view the events that are recorded in the last 90 days.
  4. On the Query Event Details page, move the pointer over the name of the event that you want to query in the Event Name column. Then, view the event details.
    Search
  5. To query the code of an event log, click the plus sign (+) to the left of the event record that you want to query, and then click Event Detail.
    Note On the Query Event Details page, you can filter events by read/write type, username, event name, resource type, resource name, service name, and AccessKey ID. Global events can be found in the event history in all regions.