Operation logs - - Alibaba Cloud Documentation Center

Cloud Storage Gateway (CSG) is integrated with ActionTrail. You can view and retrieve behavioral logs, and deliver these logs to a Logstore or Object Storage Service (OSS) bucket by using ActionTrail. The integration with ActionTrail helps you meet security and compliance requirements such as real-time auditing and error analysis.

Note

You can query operation logs generated after November 28, 2020.

View operation logs

Log on to the CSG console.
In the top navigation bar, select a region.
Note
If your CSG resources reside in a region within the Chinese mainland, select China (Shanghai) region to view operation logs. This is because ActionTrail uses centralized deployment in the Chinese mainland. If your CSG resources reside in a region outside the Chinese mainland, select the region to view operation logs.
In the left-side navigation pane, click Operation Audit.
On the Operation Audit page, click the plus icon (+) on the left of the operation logs that you want to view.

CSG operation logs recorded in ActionTrail

API events are a major source of CSG operation logs. In ActionTrail operation logs for API events, the value of the eventType field is ApiCall.

The following table describes some of CSG API operations.

Event type	Event name	Description
ApiCall	StartElasticGateway	Starts an elastic gateway.
ApiCall	StopElasticGateway	Stops an elastic gateway.
ApiCall	SetElasticGatewayDataPolicy	Configures a data policy for an elastic gateway.
ApiCall	ModifyGatewayStorageTarget	Modifies the storage target of an elastic gateway.
ApiCall	ModifyElasticGatewaySpec	Modifies the maximum throughput of an elastic gateway.
ApiCall	DescribeGatewayStorageTargets	Describes the storage target of an elastic gateway.
ApiCall	DeleteGatewayStorageTarget	Deletes the storage target of an elastic gateway.
ApiCall	CreateGatewayStorageTarget	Creates the storage target of an elastic gateway.
ApiCall	CreateElasticGateway	Creates an elastic gateway.
ApiCall	DescribeGatewayMonitorData	Describes the performance metrics of an elastic gateway.

Example

The following example shows an operation log entry recorded in ActionTrail. This log entry contains the details of a call to the CreateGateway operation:

{
    "eventId":"D334EC86-****-****-****-34D49A613994",
    "eventVersion":"1",
    "responseElements":{ // The response elements of the CreateGateway operation.
        "RequestId":"D334EC86-****-****-****-34D49A613994",
        "Message":"successful",
        "GatewayId":"gw-0001**********rk08",
        "Code":"200",
        "Success":true
    },
    "eventSource":"sgw.cn-hangzhou.aliyuncs.com",
    "requestParameters":{ // The request parameters of the CreateGateway operation.
        "AcsHost":"sgw.cn-hangzhou.aliyuncs.com",
        "Category":"Aliyun",
        "PublicNetworkBandwidth":5,
        "RequestId":"D334EC86-****-****-****-34D49A613994",
        "VSwitchId":"vsw-bp1c********ea7",
        "StorageBundleId":"sb-000a**********wrb2",
        "HostId":"sgw.cn-hangzhou.aliyuncs.com",
        "GatewayClass":"Basic",
        "Name":"test",
        "Type":"File",
        "ReleaseAfterExpiration":false,
        "AcsProduct":"sgw",
        "AcceptLanguage":"zh-CN",
        "PostPaid":true,
        "RegionId":"cn-hangzhou",
        " charset":"UTF-8",
        "Location":"Cloud"
    },
    "sourceIpAddress":"192.168.1.1" ,// The source IP address of the event.
    "userAgent":"sgwnew.console.aliyun.com",
    "eventType":"ApiCall",
    "referencedResources": { // The list of resources involved in the event.
        "ACS::CloudStorageGateway::Gateway":[
            "gw-0001**********rk08"
        ]
    },
    "userIdentity":{ // The requester information.
        "sessionContext":{
            "attributes":{
                "mfaAuthenticated":"false"
            }
        },
        "accountId":"106 ********* 811", // The ID of the Alibaba Cloud account.
        "principalId":"106 ********* 811" ,// The ID of the requester.
        "type":"root-account" ,// The Alibaba Cloud account.
        "userName":"root"
    },
    "serviceName":"CloudStorageGateway", // The name of the cloud service in the event.
    "additionalEventData":{
        "Scheme":"https"
    },
    "apiVersion":"2018-05-11",
    "requestId":"D334EC86-****-****-****-34D49A613994",
    "eventTime":"2020-11-18T11:14:05Z", // The time when the event occurred. The time is in UTC.
    "acsRegion":"cn-hangzhou", // The Alibaba Cloud region.
    "eventName":"CreateGateway" // The name of the event. 
}