If you want to analyze the historical events of the last 90 days or download these events to meet audit requirements, you can create a historical event delivery task to deliver these events to Log Service.

Prerequisites

  • You are authorized to use the historical event delivery task feature. To use this feature, submit a ticket or ask the sales manager to add you to the whitelist.
  • A trail is created in the current region. For more information, see Create a single-account trail.

Limits

  • You can create a historical event delivery task to deliver historical events only for single-account trails.
  • Historical events can be delivered only to Log Service.
  • Only one historical event delivery task can be running at a time within an Alibaba Cloud account.

Procedure

  1. Log on to the ActionTrail console.
  2. In the top navigation bar, select the region where you want to create a historical event delivery task.
    Note This region must be the same as the region where the associated trail resides.
  3. In the left-side navigation pane, click Historical Event Delivery Tasks.
  4. On the Historical Event Delivery Tasks page, click Create Task.
  5. On the Create Task page, select a trail.
    Note After you select a trail, the system automatically fills in the region from which the trail delivers events, the region where the Log Service project resides, the name of the Log Service project, and the information about the Log Service Logstore.
  6. Click Confirm.
    After you create a historical event delivery task, you can view the associated trail, the scope of the historical events that can be delivered, the delivery status, the time when the task was created, and the time when the task was complete on the Historical Event Delivery Tasks page.
    Note
    • A historical event delivery task applies only to the same type of events that were generated in the same region as you specified when you created the associated trail. Assume that you create Trail A to collect the write events that are generated in the China (Hangzhou) region and then create a historical event delivery task that is associated with Trail A. In this case, the historical event delivery task can be used to deliver the write events that were generated in the China (Hangzhou) region in the last 90 days to the specified storage space.
    • A historical event delivery task applies only to the events that were generated in the time range from 90 days before the current time to 5 minutes after the associated trail took effect. Assume that you created Trail A 40 days before you create a historical event delivery task that is associated with Trail A. In this case, the task delivers only the events that were generated in the last 50 days before Trail A was created.