When an event is delivered to the Object Storage Service (OSS) bucket that you specify or create, ActionTrail generates a storage path for the event log file with the hierarchy specified based on the region and date information, including the year, month, and day, and places the log file under the path.

  • For an event that a single-account trail delivers to an OSS bucket, the storage path is in the following format:
    oss://<bucket>/<Log file prefix>/AliyunLogs/Actiontrail/regionid/<YYYY>/<MM>/<DD>/<Log file>
  • For an event that a multi-account trail delivers to an OSS bucket, the storage path is in the following format:
    oss://<bucket>/<Log file prefix>/AliyunLogs/Actiontrail/rd_id/accountid/regionid/yyyy/mm/dd/Log file