This topic describes how to query historical events in the ActionTrail console. By
default, ActionTrail allows you to query the events that are recorded within your
Alibaba Cloud account in the last 90 days.
Note You can query historical events only for a single-account trail in the ActionTrail
console. The events can be queried at most twice per second. You cannot query historical
events for a multi-account trail in the ActionTrail console. You can query such events
only in the corresponding Object Storage Service (OSS) bucket or Log Service Logstore.
Procedure
- Log on to the ActionTrail console.
- In the top navigation bar, select the region where the events you want to query occurred
from the drop-down list.
- In the left-side navigation pane, choose . On the page that appears, query and view the events that are recorded in the last
90 days.
- On the Query Event Details page, move the pointer over the name of the event that you want to query in the Event Name column. Then, view the event details.
- To query the code of an event log, click the plus sign (+) to the left of the event
record that you want to query, and then click Event Detail.
Note On the Query Event Details page, you can filter events by read/write type, username,
event name, resource type, resource name, service name, and AccessKey ID. Global events
can be found in the event history in all regions.