After you create a trail for the Inner-ActionTrail feature, the ActionTrail delivers platform operation events to a specified log service to audit and monitor platform operations so that you can analyze the platform operation events. This topic describes how to create, update, delete, and disable a platform-ActionTrail trail.
Prerequisites
The Inner-ActionTrail feature is enabled. For more information, see Enable Inner-ActionTrail.
Create a trail
Log on to the ActionTrail console.
In the left-side navigation pane, choose .
In the Trail Basic Settings step, set Trail Name and click Next.
In the Event Delivery Settings page, select Delivery to Log Service, select a log project, and then click Next.
New Log Service Project: If you select this option, select a region from the Logstore Region drop-down list and configure the Project Name parameter.
Existing Log Service Project: If you select this option, select a region from the Logstore Region drop-down list and a project name from the Project Name drop-down list.
In the Preview and Create page, confirm the tracking information and click Submit.
Result
ActionTrail automatically creates a Logstore whose name is in the innertrail_<trail name>format as well as the indexes and charts for the Alibaba Cloud-initiated events. You can find the trail on the Trails page, click Log Analysis in the Log Service column to analyze the events, or click Log Reports to view the distribution charts of the events.
For more information about the fields in Alibaba Cloud-initiated events collected by using the Inner-ActionTrail feature, see Fields in Alibaba Cloud-initiated events.
Modify a trail
Log on to the ActionTrail console.
In the left-side navigation pane, choose .
Find the trail that you want to update and click the trail name.
Click the
icon in the upper-right corner. On the Trail Basic Settings step, set Trail Name and click Next.
In the Event Delivery Settings step, select Delivery to Log Service, select a log project, and then click Next.
New Project: If you select this option, select a region from the Logstore Region drop-down list and set the Project Name parameter.
Existing Project: If you select this option, select a region from the Logstore Region drop-down list and a project name from the Project Name drop-down list.
In the Preview and Create step, confirm the updated trail information and click Submit.
Delete a trail
Log on to the ActionTrail console.
In the left-side navigation pane, choose .
On the Trails page, find the trail that you want to delete and click Delete in the Actions column.
In the Delete Trail message, click Confirm.
NotePlatform event logs that are delivered to the Log Service Logstore are not deleted.
Disable a trail
When disabled, the ActionTrail stops delivering platform action events to the specified address, but retains the existing parameter configurations.
Log on to the ActionTrail console.
In the left-side navigation pane, choose .
On the Trail page, find the trail that you want to disable and click the trail name.
Turn off Status.
In the Delete Trail message, click Confirm.
NoteIf you want to enable the trail, turn on the switch.
References
After you ship platform events to Log Service, you can query, analyze, download, ship, and process logs, and create alerts. For more information, see Common operations for cloud service logs.