This topic describes how to collect the audit logs of an ApsaraDB RDS for MySQL instance. This topic also describes the fields in the audit logs. You can deliver the audit logs to Log Service by using the Log Audit Service feature of Log Service. Then, you can centrally manage the audit logs in the Log Service console.

Log collection methods

Log Service can collect the audit logs of an RDS instance by using one of the following three methods:

  • Log Audit Service
    • Log on to the Log Service console. In the Log Application section of the Log Service console, click Log Audit Service.
    • If you want to collect the audit logs of multiple RDS instances that are created within different Alibaba Cloud accounts or the audit logs of multiple RDS instances that are deployed in different regions, we recommend that you use this method.
  • Import Data - RDS SQL Audit
    • Log on to the Log Service console. In the Import Data section of the Log Service console, click RDS SQL Audit.
    • This method can be replaced by the RDS Audit Center.
Property Import Data - RDS SQL Audit RDS Audit Center Log Audit Service
RDS instance-level log collection Supported Supported Supported
Storage in Logstores Supported Supported Not supported
Log collection from RDS instances that are deployed in different regions Not supported Not supported Supported
Log collection from RDS instances that are created within different Alibaba Cloud accounts Not supported Not supported Supported
Automatic collection Not supported Supported Supported
Manual collection Supported Supported Not supported
Collection status view Not supported Supported Not supported

Fields in audit logs

For more information, see ApsaraDB RDS.