Audit alerts record database activity details so you can identify potential malicious behavior, investigate unauthorized access attempts, and meet compliance requirements. This topic describes how to view and export audit alert logs in the DAS console.
Prerequisites
Before you begin, ensure that you have:
The new version of the security audit feature enabled. For more information, see Enable security audit (new version)
View audit alerts for a single instance
Use this path to review alert logs for one specific database instance. You see only the activity records for that instance.
Log on to the DAS console.
In the left-side navigation pane, choose Intelligent O&M Center > Instance Monitoring.
Find the database instance you want to manage and click its instance ID. The instance details page appears.
In the left-side navigation pane, click Security Audit.
On the Security Audit page, choose Audit alerts > Alert Logs.
View the alert logs in either mode:
Analysis mode: Select a time range. DAS displays all database activities in that range in reverse chronological order. Find the log you want and click Details in the Actions column.
List mode: Find the log directly in the list and click Details in the Actions column.
View audit alerts for multiple instances
If security audit is enabled for multiple database instances, you can review alert logs for all database instances on a single page instead of navigating to each instance separately.
Log on to the DAS console.
In the left-side navigation pane, choose Security Center > Security Audit.
On the Security Audit page, choose Audit alerts > Alert Logs.
View the alert logs in either mode:
Analysis mode: Select a time range. DAS displays all database activities across instances in that range in reverse chronological order. Find the log you want and click Details in the Actions column.
List mode: Find the log directly in the list and click Details in the Actions column.
Export logs
Log on to the DAS console.
In the left-side navigation pane, choose Intelligent O&M Center > Instance Monitoring.
Find the database instance you want to manage and click its instance ID. The instance details page appears.
In the left-side navigation pane, click Security Audit.
On the Security Audit page, choose Audit alerts > Alert Logs.
Select a time range, configure any additional filter conditions, and click Search.
Click Export.
The downloaded file contains all logs that match the specified search conditions.
What's next
By default, DAS enables all built-in database audit rules. To disable rules you don't need, see Configure alert rules.