ApsaraMQ for Kafka is integrated with ActionTrail. You can query the user-initiated events that are generated when you perform operations on ApsaraMQ for Kafka in ActionTrail. Audit events help you:
-
Track who accessed or modified Kafka resources and when
-
Investigate security incidents and unauthorized access attempts
-
Meet regulatory compliance requirements with a complete audit trail
-
Monitor operational changes across instances, topics, and consumer groups
ActionTrail delivers audit events to Logstores in Simple Log Service (SLS) or buckets in Object Storage Service (OSS) for real-time analysis and long-term retention.
Audit event reference
ActionTrail captures management events for all ApsaraMQ for Kafka operations performed through the console or API. The following tables list every auditable event, organized by functional area.
Access control (ACL and SASL)
Events for access control list (ACL) and Simple Authentication and Security Layer (SASL) user management.
Console events
|
Event name |
Description |
|
ConsoleKafkaAclAddSaslUser |
Creates or modifies a SASL user |
|
ConsoleKafkaAclCreateAcl |
Creates an ACL |
|
ConsoleKafkaAclDeleteAcl |
Deletes an ACL |
|
ConsoleKafkaAclDeleteSaslUser |
Deletes a SASL user |
|
ConsoleKafkaAclEnableAcl |
Enables the ACL feature |
API events
|
Event name |
Description |
|
CreateAcl |
Creates an ACL |
|
DeleteAcl |
Deletes an ACL |
|
CreateSaslUser |
Creates a SASL user |
|
DeleteSaslUser |
Deletes a SASL user |
Connector operations
Events for connector lifecycle management, including AnalyticDB and Tablestore sink connectors.
Console events
|
Event name |
Description |
|
ConsoleKafkaConnectorCreateDeployment |
Creates a connector |
|
ConsoleKafkaConnectorDeleteDeployment |
Deletes a connector |
|
ConsoleKafkaConnectorDeployDeployment |
Deploys a connector |
|
ConsoleKafkaConnectorOperateDeployment |
Manages a connector |
|
ConsoleKafkaConnectorUpgradeDeploymentParams |
Modifies connector configurations |
|
ConsoleKafkaConnectorCreateAdbSinkDeployment |
Creates an AnalyticDB sink connector |
|
ConsoleKafkaConnectorDeleteAdbSinkDeployment |
Deletes an AnalyticDB sink connector |
|
ConsoleKafkaConnectorDeployAdbSinkDeployment |
Deploys an AnalyticDB sink connector |
|
ConsoleKafkaConnectorOperateAdbSinkDeployment |
Manages an AnalyticDB sink connector |
|
ConsoleKafkaConnectorCreateOtsSinkDeployment |
Creates a Tablestore sink connector |
|
ConsoleKafkaConnectorDeleteOtsSinkDeployment |
Deletes a Tablestore sink connector |
|
ConsoleKafkaConnectorDeployOtsSinkDeployment |
Deploys a Tablestore sink connector |
|
ConsoleKafkaConnectorOperateOtsSinkDeployment |
Manages a Tablestore sink connector |
|
ConsoleKafkaConnectorOpenKafkaConnector |
Enables the connector feature |
|
ConsoleKafkaConnectorCreateConnectorSlr |
Grants permissions required for the connector feature |
API events
|
Event name |
Description |
|
CreateConnectorTask |
Creates a connector |
|
DeleteConnectorTask |
Deletes a connector |
|
DeployConnectorTask |
Deploys a connector |
|
GenerateConnectorTaskSystemResource |
Creates resources for a connector |
|
UpdateConnectorTaskRemark |
Updates the description of a connector |
Instance management
Events for instance lifecycle, configuration, and upgrades.
Console events
|
Event name |
Description |
|
ConsoleKafkaInstanceUpdateBasicInfo |
Deploys an instance |
|
ConsoleKafkaInstanceUpdateConfig |
Modifies instance configurations |
|
ConsoleKafkaInstanceUpdateInstanceName |
Renames an instance |
|
ConsoleKafkaInstanceUpdateWhiteList |
Modifies an instance whitelist |
|
ConsoleKafkaInstanceUpgradeService |
Updates the instance version |
|
ConsoleKafkaInstanceOperateDomain |
Enables domain name mode for an endpoint |
|
ConsoleKafkaInstanceUpdateAutoCreateGroupStatus |
Enables flexible group creation |
|
ConsoleKafkaInstanceCreateDefaultSlrRole |
Creates a service-linked role and grants permissions |
|
ConsoleKafkaInstanceDelete |
Deletes an instance |
|
ConsoleKafkaInstanceRelease |
Releases an instance |
|
ConsoleKafkaInstancePauseServerless |
Temporarily disables auto scaling for a Serverless Edition instance |
API events
|
Event name |
Description |
|
StartInstance |
Deploys an instance |
|
ModifyInstanceName |
Renames an instance |
|
UpdateInstanceConfig |
Updates instance configurations |
|
UpdateAllowedIp |
Modifies an instance whitelist |
|
UpgradeInstanceVersion |
Updates the instance version |
|
DeleteInstance |
Deletes an instance |
|
ReleaseInstance |
Releases a pay-as-you-go instance |
|
OpenService |
Activates ApsaraMQ for Kafka |
Topic operations
Events for topic creation, configuration, and partition management.
Console events
|
Event name |
Description |
|
ConsoleTopicCreate |
Creates a topic |
|
ConsoleTopicDelete |
Deletes a topic |
|
ConsoleTopicAddPartition |
Creates a partition |
|
ConsoleTopicUpdateTopicConfig |
Updates topic configurations |
|
ConsoleTopicUpdateTopicRemark |
Updates the description of a topic |
|
ConsoleTopicRebalanceRebalance |
Triggers topic traffic rebalance |
API events
|
Event name |
Description |
|
CreateTopic |
Creates a topic |
|
DeleteTopic |
Deletes a topic |
|
ModifyPartitionNum |
Changes the number of partitions in a topic |
|
ModifyTopicRemark |
Changes the description of a topic |
Consumer group operations
Events for consumer group management and offset control.
Console events
|
Event name |
Description |
|
ConsoleSubscriptionCreate |
Creates a consumer group |
|
ConsoleSubscriptionDelete |
Deletes a consumer group |
|
ConsoleSubscriptionResetOffset |
Resets a consumer offset |
API events
|
Event name |
Description |
|
CreateConsumerGroup |
Creates a consumer group |
|
DeleteConsumerGroup |
Deletes a consumer group |
Message operations
Events for sending and retrieving messages.
Console events
|
Event name |
Description |
|
ConsoleKafkaMessageSendMessage |
Sends a message |
|
ConsoleKafkaConnectorOpenMessageSearch |
Enables the message retrieval feature |
|
ConsoleKafkaConnectorCloseMessageSearch |
Disables the message retrieval feature |
|
ConsoleKafkaConnectorOperateMessageSearch |
Retrieves messages using the message retrieval feature |
ETL tasks
Events for extract, transform, and load (ETL) task management.
Console events
|
Event name |
Description |
|
ConsoleKafkaETLCreateTask |
Creates an ETL task |
|
ConsoleKafkaETLDeleteTask |
Deletes an ETL task |
|
ConsoleKafkaETLCreateSlr |
Grants the permissions required to create an ETL task |
|
ConsoleKafkaETLCheckFC |
Checks whether Function Compute is activated |
Migration
Events for data migration tasks.
Console events
|
Event name |
Description |
|
ConsoleKafkaMigrationCreateResources |
Creates a migration task |
|
ConsoleKafkaMigrationDeleteMigrationRecord |
Deletes a migration task |
|
ConsoleKafkaMigrationUploadMigrationReport |
Uploads a migration file |
API events
|
Event name |
Description |
|
SendMigrationHeartbeat |
Sends a heartbeat during migration |
Billing and orders
Events for billing method changes and instance orders.
API events
|
Event name |
Description |
|
ConvertPostPayOrder |
Changes billing from pay-as-you-go to subscription |
|
CreatePostPayOrder |
Creates a pay-as-you-go instance |
|
CreatePrePayOrder |
Creates a subscription instance |
|
UpgradePostPayOrder |
Upgrades a pay-as-you-go instance |
|
UpgradePrePayOrder |
Upgrades a subscription instance |
Tags
Events for resource tagging.
Console events
|
Event name |
Description |
|
ConsoleKafkaTagsTagResources |
Attaches tags to resources |
|
ConsoleKafkaTagsUnTagResources |
Detaches tags from resources |
API events
|
Event name |
Description |
|
TagResources |
Attaches tags to resources |
|
UntagResources |
Detaches tags from resources |
Contacts and alerts
Events for contact management and risk alerts.
Console events
|
Event name |
Description |
|
ConsoleKafkaContactUpdate |
Updates contact information |
|
ConsoleKafkaContactDelete |
Deletes a contact |
|
ConsoleKafkaRiskUpdate |
Updates the risk status of an instance |
|
ConsoleKafkaRisktDelete |
Deletes a risk alert for an instance |
Scheduled tasks
Events for scheduling task management.
Console events
|
Event name |
Description |
|
ConsoleKafkaScheduledTaskModifyTaskExecuteTime |
Changes the scheduled execution time for a task |
Query audit events in ActionTrail
To view audit events for ApsaraMQ for Kafka:
-
Log on to the ActionTrail console.
-
In the left-side navigation pane, click Query.
-
Select Service Name from the drop-down list and enter AliKafka in the search box.
