This topic describes the fields in the operation log entries that are generated by Bastionhost.

Field Description
__topic__ The topic of the log entry.
owner_id The ID of the Alibaba Cloud account that owns the bastion host.
content The content of the log entry.
event_type The type of the recorded event. For more information, see Table 1.
instance_id The ID of the bastion host.
log_level The severity level of the log entry.
resource_address The address of the resource on which the recorded operation is performed.
resource_name The name of the resource on which the recorded operation is performed.
result The result of the recorded operation.
session_id The ID of the session in which the recorded operation is performed.
user_client_ip The IP address of the user who performs the recorded operation.
user_id The ID of the user who performs the recorded operation.
user_name The name of the user who performs the recorded operation.
Table 1. Event types
Event type Description
cmd.Command Start Command Prompt.
cmd.Command.policy Command processed based on control policies.
graph.Text Text graph.
graph.Keyboard Graphical keyboard event.
file.Upload File upload.
file.Download File download.
file.Rename File renaming.
file.Delete Object deletion.
file.DeleteDir Directory deletion.
file.CreateDir Directory creation.
login.CSLogin User Client/Server (CS) logon.
Session.session Session.