This topic describes the release notes of ActionTrail features and provides links to the relevant topics.

November 2021

Feature Description Release date Region References
Event-based custom alerts Custom alert rules can be created in ActionTrail to monitor specified events. You can write query statements and set thresholds when you create custom alert rules. 2021-11 All regions Create a custom alert rule

August 2021

Feature Description Release date Region References
Insight events for intelligent analysis Insight events for intelligent analysis help you identify abnormal operations that are recorded in user-initiated events. This way, you can identify potential risks to your cloud resources and take remedial measures at the earliest opportunity. After you enable the insight event feature for a trail, ActionTrail identifies abnormal operations based on the user-initiated events recorded by the trail and generates insight events. These insight events are delivered to the Log Service Logstore or Object Storage Service (OSS) bucket specified for the trail.
Note To obtain the permissions to manage insight events, submit a ticket.
2021-08 All regions, except for the China (Heyuan), China (Guangzhou), and UAE (Dubai) regions Overview of insight events

April 2021

Feature Description Release date Region References
Event alerting The event alerting feature allows you to configure alert rules for a trail if the trail is configured to deliver events to a specified Log Service Logstore. When the alert rules are triggered by sensitive or abnormal operations, you can receive alert notifications and take remedial measures. 2021-04 All regions Overview

March 2021

Feature Description Release date Region References
Cross-account event delivery The cross-account event delivery feature allows you to deliver the events of multiple Alibaba Cloud accounts or those of multiple member accounts in your resource directory to the same Log Service Logstore or OSS bucket. This helps you archive and monitor audit data in a centralized manner. 2021-03 All regions
More supported Alibaba Cloud services and fields for Inner-ActionTrail
  • The Inner-ActionTrail feature supports two more Alibaba Cloud services: Key Management Service (KMS) and Data Security Center (DSC).
  • The EmployeeID field is added to the logs of Alibaba Cloud-initiated events. This field indicates the encrypted ciphertext of the globally unique employee ID of the operator on Alibaba Cloud.
2021-03 All regions

January 2021

Feature Description Release date Region References
Historical event delivery tasks A historical event delivery task delivers the events that occurred in the last 90 days and are recorded by ActionTrail to Log Service. Then, you can analyze or download these events based on your business requirements. 2021-01 All regions Create a historical event delivery task

December 2020

Feature Description Release date Region References
Advanced event query The advanced event query feature allows you to perform advanced event queries based on a trail that is configured to deliver events to a specified Log Service Logstore. You can specify multiple criteria to query the events that are associated with multiple Alibaba Cloud services and occurred in multiple regions more than 90 days ago. 2020-12 All regions Perform advanced event queries

October 2020

Feature Description Release date Region References
Event summary query The event summary query feature is added to the ActionTrail console. ActionTrail generates event summaries every 2 hours. You can query the event summaries in the ActionTrail console to improve event query efficiency. 2020-10 All regions Event summary query

September 2020

Feature Description Release date Region References
Best practices The Best Practices page is added to the ActionTrail console. You can click the links on this page to view the best practices about operations such as creating trails and analyzing events. 2020-09 All regions

August 2020

Feature Description Release date Region References
Optimization in trails Trails in all regions can be viewed in a specific region. This facilitates trail management. The method that is used to create a trail is also updated. 2020-08 All regions

July 2020

Feature Description Release date Region References
Details about events Details about events, such as the source (Alibaba Cloud service), operator, and name of each event, are added. 2020-07 All regions Query events in the ActionTrail console

March 2020

Feature Description Release date Region References
Multi-account trails The events of all member accounts in the resource directory of an enterprise can be delivered to a specified OSS bucket or Log Service Logstore. 2020-03 All regions

February 2020

Feature Description Release date Region References
More supported Alibaba Cloud services Events of more Alibaba Cloud services are supported. 2020-02 All regions Supported Alibaba Cloud services and events
Optimized engine for online event queries Multiple query criteria can be used at the same time. A single criterion supports multiple options. 2020-02 All regions Query events in the ActionTrail console

January 2020

Feature Description Release date Region References
Notifications for event delivery If this feature is enabled, you can receive notifications from a Message Service (MNS) topic after ActionTrail delivers events to a specified OSS bucket. 2020-01 All regions Create a single-account trail
OSS server-side encryption You can configure server-side encryption for the events to be delivered to an OSS bucket. 2020-01 All regions Create a single-account trail

December 2019

Feature Description Release date Region References
Integration with the ECS console Events of an Elastic Compute Service (ECS) instance can be viewed in the ECS console. 2019-12 All regions Query events in the ECS console
Multiple trails A maximum of five trails can be created in each region. You can create trails to track and record different types of events that occur in different regions and deliver the events to specified OSS buckets or Log Service Logstores based on your business requirements. 2019-12 All regions Create a single-account trail
Region selection for trails Trails can be created to track and record events in one or more regions based on your business requirements. 2019-12 All regions Create a single-account trail
Online query of events that occurred in the last 90 days The online query of events that occurred in the last 90 days is supported without the need to create trails. The number of days that an event can be stored for query in the ActionTrail console is increased from 30 days to 90 days. You can create trails to store the events for a longer period of time to facilitate subsequent queries. 2019-12 All regions Query events in the ActionTrail console

November 2019

Feature Description Release date Region References
Direct use of the service Direct use of the service for all valid Alibaba Cloud accounts is supported. You do not need to activate ActionTrail. 2019-11 All regions Billing
Best practices Best practices are provided to help you use ActionTrail and understand the compliance auditing on Alibaba Cloud. 2019-11 All regions

October 2019

Feature Description Release date Region References
More supported Alibaba Cloud services Events of more Alibaba Cloud services are supported. 2019-10 All regions Supported Alibaba Cloud services and events

September 2019

Feature Description Release date Region References
Inner-ActionTrail Events that are initiated by Alibaba Cloud can be tracked and recorded. This improves the transparency of O&M on Alibaba Cloud. Only events of OSS are supported. You can submit a ticket to use this feature. 2019-9 Regions supported by the China site (aliyun.com) Enable the inner-ActionTrail feature