All Products
Search

This Product

    Data Security Center:DescribeAuditLogs

    Document Center

    Data Security Center:DescribeAuditLogs

    Last Updated:Jan 21, 2026

    Retrieves a list of audit alert logs.

    Operation description

    This operation retrieves a list of data audit alert logs, which you can use to search for and handle alerts.

    QPS limit

    The queries per second (QPS) limit for a single user is 10. If you exceed this limit, the system throttles your API calls. This may affect your business. Plan your calls accordingly.

    Try it now

    Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

    Test

    RAM authorization

    The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

    • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

    • API: The API that you can call to perform the action.

    • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

    • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

      • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

      • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

    • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

    • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

    Action

    Access level

    Resource type

    Condition key

    Dependent action

    yundun-sddp:DescribeAuditLogs

    none

    *All Resource

    *
    • acs:ResourceGroupId
    		 None

    Request parameters

    Parameter

    Type

    Required

    Description

    Example
    Lang

    string

    No

    The language of the request and response. Default value: zh_cn. Valid values:

    • zh_cn: Chinese.

    • en_us: English.

    zh
    UserName

    string

    No

    The username.

    admin
    ClientIp

    string

    No

    The IP address of the client.

    10.*.*.94
    ClientUa

    string

    No

    The client type.

    mysql
    InstanceName

    string

    No

    The name of the data asset instance.

    i-2zeftaaq4gqcqb9kfkzg
    DatabaseName

    string

    No

    The name of the database.

    bose_o2o_data
    StartTime

    integer

    No

    The start time of the alert log. This value is a UNIX timestamp in milliseconds.

    1616068534877
    EndTime

    integer

    No

    The end time of the alert log. This value is a UNIX timestamp in milliseconds.

    1583856000000
    ProductCode

    string

    No

    The name of the Alibaba Cloud service to which the data asset belongs. Valid values include MaxCompute, OSS, ADS, OTS, and RDS.

    RDS
    ProductId

    integer

    No

    The ID of the Alibaba Cloud service to which the data object belongs. Valid values:

    • 1: MaxCompute

    • 2: OSS

    • 3: ADB-MYSQL

    • 4: TableStore

    • 5: RDS

    • 6: SELF_DB

    • 7: PolarDB-X

    • 8: PolarDB

    • 9: ADB-PG

    • 10: OceanBase

    • 11: MongoDB

    • 25: Redis

    5
    SqlText

    string

    No

    The content of the SQL statement.

    select * from test03
    ExecuteTimeRange

    string

    No

    The range of the running time.

    in[1000 2000]
    EffectRowRange

    string

    No

    The range of the number of affected rows.

    in[1 33]
    RuleID

    string

    No

    The ID of the audit policy.

    994007
    RuleName

    string

    No

    The name of the audit policy.

    test_rule
    OperateType

    string

    No

    The operation type.

    Insert
    OssObjectKey

    string

    No

    The key of the OSS object.

    oss-key
    AsyncRequestId

    string

    No

    The request ID.

    CE4681BA-8019-5BE1-9F4B-8973BEA9CF57
    PageSize

    integer

    No

    The number of entries to return on each page for a paged query. Maximum value: 50. Default value: 10.

    10
    CurrentPage

    integer

    No

    The page number of the paged query. Default value: 1.

    1
    RuleCategory

    string

    No

    The rule type.

    10
    LoadWhiteList

    boolean

    No

    Specifies whether to load the whitelist status.

    false
    MemberAccount

    string

    No

    The UID of the member account.

    **********8103
    IpType

    string

    No

    The network type. This is an enumeration. Valid values:

    • default (default value): a service that is not an Alibaba Cloud service

    • aliyun: an Alibaba Cloud service

    aliyun
    LogQueryOpJson

    string

    No

    [ { "isContain" : false, "queryKey" : "effectRowRange" }, { "isContain" : false, "queryKey" : "remoteClientIp" } ]
    Message

    string

    No

    The content of the message.

    success
    LogSource

    string

    No

    SLOW_SQL
    RuleAggQuery

    boolean

    No

    Response elements

    Element

    Type

    Description

    Example

    object

    AsyncRequestId

    string

    The request ID.

    CE4681BA-8019-5BE1-9F4B-8973BEA9CF57

    CurrentPage

    integer

    The page number of the paged query. Default value: 1.

    1
    PageSize

    integer

    The number of entries returned on each page for a paged query. Maximum value: 50. Default value: 10.

    10
    RequestId

    string

    The ID of the request.

    A7021857-AFD9-5AD6-979D-AA7DFC5AFADF
    TotalCount

    integer

    The total number of entries in the result set.

    12
    Items

    array<object>

    The list of alert logs.

    object

    The list of alert logs.

    CreationTime

    integer

    The time when the alert was generated. This value is a UNIX timestamp in milliseconds.

    1536751124000
    WarnLevel

    string

    The risk level.

    • 1: Low

    • 2: Medium

    • 3: Important

    2
    ClientPort

    string

    The client port.

    35756
    TableName

    string

    The name of the table.

    it_table
    EffectRow

    integer

    The number of affected rows.

    10
    PackageName

    string

    The name of the MaxCompute package.

    test01
    UserId

    string

    The UID of the user.

    19********94
    Message

    string

    The content of the raw log.

    success
    RuleId

    string

    The ID of the audit policy.

    9952275
    OperateType

    string

    The operation type.

    Drop
    LogTime

    integer

    The time when the log was generated.

    1751870592000
    WarnLevelName

    string

    The name of the risk level.

    • Low

    • Medium

    • Important

    高危
    InstanceName

    string

    The name of the data asset instance.

    rm-1234
    DatabaseName

    string

    The name of the database.

    chngc_b2b_migration_sh
    OssObjectKey

    string

    The key of the OSS object.

    oss-key1
    ExecuteStatus

    integer

    The execution status. A value of 0 indicates failure and a value of 1 indicates success.

    1
    ProductId

    integer

    The ID of the Alibaba Cloud service to which the data asset belongs. Valid values:

    • 1: MaxCompute.

    • 2: OSS.

    • 3: ADS.

    • 4: OTS.

    • 5: RDS.

    • 6: SELF_DB.

    5
    ExecuteTime

    integer

    The running time in milliseconds.

    1751870592000
    UserName

    string

    The username.

    admin
    InstanceDescription

    string

    The description of the data asset instance.

    instance dscription
    RuleName

    string

    The name of the audit policy.

    name
    ColumnName

    string

    The name of the column.

    hide14
    ClientIp

    string

    The IP address of the client.

    139.*.*.57
    ClientUa

    string

    The client type.

    mysql
    ProductCode

    string

    The name of the Alibaba Cloud service to which the column data in the data asset table belongs. Valid values include MaxCompute, OSS, ADS, OTS, and RDS.

    RDS
    SqlText

    string

    The SQL statement in the alert log.

    select * from test03

    InWhiteList

    boolean

    Indicates whether the entry is in the whitelist.

    true
    MemberAccount

    string

    The UID of the member account.

    **********8103
    RuleCategory

    string

    The rule type.

    10
    IpType

    string

    The network type. This is an enumeration. Valid values:

    default (default value): a service that is not an Alibaba Cloud service

    aliyun: an Alibaba Cloud service

    aliyun
    ModelName

    string

    The sensitive data model that was hit.

    Identity Card
    DataSet

    string

    The SQL result set.

    plan_id ~ application_id ~ plan_type ~ plan_name ~ plan_value_id
    LogSource

    string

    SLOW_SQL
    InstanceAuditStatus

    string

    2
    DbType

    string

    The database type.

    MySQL

    Examples

    Success response

    JSON format

    {
  "AsyncRequestId": "CE4681BA-8019-5BE1-9F4B-8973BEA9CF57\n",
  "CurrentPage": 1,
  "PageSize": 10,
  "RequestId": "A7021857-AFD9-5AD6-979D-AA7DFC5AFADF",
  "TotalCount": 12,
  "Items": [
    {
      "CreationTime": 1536751124000,
      "WarnLevel": "2",
      "ClientPort": "35756",
      "TableName": "it_table",
      "EffectRow": 10,
      "PackageName": "test01",
      "UserId": "19********94",
      "Message": "success",
      "RuleId": "9952275",
      "OperateType": "Drop",
      "LogTime": 1751870592000,
      "WarnLevelName": "高危",
      "InstanceName": "rm-1234",
      "DatabaseName": "chngc_b2b_migration_sh",
      "OssObjectKey": "oss-key1",
      "ExecuteStatus": 1,
      "ProductId": 5,
      "ExecuteTime": 1751870592000,
      "UserName": "admin",
      "InstanceDescription": "instance dscription",
      "RuleName": "name",
      "ColumnName": "hide14",
      "ClientIp": "139.*.*.57",
      "ClientUa": "mysql",
      "ProductCode": "RDS",
      "SqlText": "select * from test03\n",
      "InWhiteList": true,
      "MemberAccount": "**********8103",
      "RuleCategory": "10",
      "IpType": "aliyun",
      "ModelName": "Identity Card",
      "DataSet": "plan_id ~ application_id ~ plan_type ~ plan_name ~ plan_value_id",
      "LogSource": "SLOW_SQL",
      "InstanceAuditStatus": "2",
      "DbType": "MySQL"
    }
  ]
}

    Error codes

    See Error Codes for a complete list.

    Release notes

    See Release Notes for a complete list.