This topic describes how to collect the audit logs of an ApsaraDB RDS for MySQL instance. This topic also describes the fields in the audit logs. You can deliver the audit logs to Log Service by using the Log Audit Service feature of Log Service. Then, you can centrally manage the audit logs in the Log Service console.
Log collection methods
Log Service can collect the audit logs of an RDS instance by using one of the following three methods:
- Log Audit Service
- Log on to the Log Service console. In the Log Application section of the Log Service console, click Log Audit Service.
- If you want to collect the audit logs of multiple RDS instances that are created within different Alibaba Cloud accounts or the audit logs of multiple RDS instances that are deployed in different regions, we recommend that you use this method.
- Import Data - RDS SQL Audit
- Log on to the Log Service console. In the Import Data section of the Log Service console, click RDS SQL Audit.
- This method can be replaced by the RDS Audit Center.
|Property||Import Data - RDS SQL Audit||RDS Audit Center||Log Audit Service|
|RDS instance-level log collection||Supported||Supported||Supported|
|Storage in Logstores||Supported||Supported||Not supported|
|Log collection from RDS instances that are deployed in different regions||Not supported||Not supported||Supported|
|Log collection from RDS instances that are created within different Alibaba Cloud accounts||Not supported||Not supported||Supported|
|Automatic collection||Not supported||Supported||Supported|
|Manual collection||Supported||Supported||Not supported|
|Collection status view||Not supported||Supported||Not supported|
Fields in audit logs
For more information, see ApsaraDB RDS.