DSC Enterprise Edition includes log storage based on your asset coverage: 200 GB per database instance and 50 GB per 1 TB of Object Storage Service (OSS) storage. Use the Log Analysis page to monitor usage, adjust capacity, configure retention rules, and query archived logs.
Prerequisites
Before you begin, ensure that you have:
Data auditing enabled for the assets you want to manage. For setup instructions, see Enable and configure the data auditing mode
Assets that support audit logs
Storage metrics
DSC tracks three storage metrics on the Log Analysis page:
| Metric | Description |
|---|---|
| Online Log Storage | Audit logs stored in Simple Log Service. Size varies based on the time range selected for online queries. |
| Archived Log Storage | Logs that DSC has compressed and moved to OSS after an extended retention period. Archived logs consume less space than online logs. You can view archived logs on the Storage Management tab. |
| Remaining Capacity | Total log storage capacity of your DSC Enterprise Edition minus online log storage minus archived log storage. |
View storage usage
Log on to the DSC console.
In the left-side navigation pane, click Log Analysis.
On the Log Analysis page, click New Version.
Click the storage capacity section in the upper-right corner to view your Online Log Storage, Archived Log Storage, and Remaining Capacity.
Manage storage capacity
Extend storage
If your remaining capacity is insufficient, click Extend Storage Capacity on the Log Analysis page to go to the Upgrade/Downgrade page and purchase additional log storage. For billing details, see Billing overview.
Delete logs
To free up storage, click Delete All on the Log Analysis page. In the Delete Logs dialog box, select the log types to delete (online logs, archived logs, or both), then click OK.
Set up storage alerts
To receive alerts when remaining capacity falls below a threshold, click Alert on the Log Analysis page. DSC redirects you to System Settings > Alert notification, where you can create alert rules on the Alert notification tab.
For alert configuration steps, see Configure email and text message alert notifications and Configure DingTalk chatbot alert notifications.
Configure log storage rules
DSC supports two storage management modes: Manual and Automatic. Choose based on your compliance requirements and capacity planning needs.
| Mode | How it works | Best for |
|---|---|---|
| Manual | You set a fixed retention period for online logs and optionally enable automatic archiving. | Predictable retention requirements or compliance policies with specific day thresholds |
| Automatic | DSC adjusts the online query period daily based on log volume and total capacity, maintaining at least 30 days of online access. | Variable log volumes where you want DSC to manage storage automatically |
To configure log storage rules:
Log on to the DSC console.
In the left-side navigation pane, click Log Analysis.
In the upper-right corner of the Log Analysis page, click Log Storage Management.
In the Log Storage Management panel, select a management mode and configure the settings.
Click OK.
Manual mode
Specify the online log retention period in days. Online logs that exceed the retention period are deleted.
The default retention period is 90 days.
To also preserve logs beyond the retention period, enable automatic archiving. When automatic archiving is on and the retention period is set to N days, DSC compresses and archives logs retained for more than (N - 3) days, moving them from Simple Log Service to OSS.
Automatic mode
DSC evaluates log volume and storage capacity daily and adjusts the online query period accordingly. The online query period is always at least 30 days. When the online query period is insufficient to hold all logs, DSC automatically archives the oldest logs to OSS.
Log lifecycle
To delete all audit logs after a fixed period regardless of mode, select the Log Lifecycle checkbox and specify a deletion cycle.
The default log lifecycle is 180 days. When the current cycle ends, DSC deletes all existing audit logs.
Query archived logs
Archived logs are not directly viewable online. Use the archived log query feature to parse and view them.
Log on to the DSC console.
In the left-side navigation pane, click Log Analysis.
In the upper-right corner of the Log Analysis page, click Log Storage Management.
In the Log Storage Management panel, click Query Archived Logs.
In the Query Archived Logs dialog box, select a date range and click OK. DSC starts parsing the archived logs for the specified range.
In the Log Parsing Records dialog box, monitor the parsing status. When the status is Completed, click View in the Actions column to view the logs.
To check previously submitted parsing requests, click Query Achieving Records to reopen the Log Parsing Records dialog box.
For details on reading log content, see View audit logs.
Next steps
View audit logs: After configuring the data auditing mode for an asset, go to the Log Analysis page to view audit logs. See View audit logs.
Set up audit alert rules: DSC provides default auditing rules for databases, OSS, and MaxCompute, and supports custom rules. When audit alert rules are enabled, DSC identifies anomalies, data leaks, vulnerabilities, and SQL injections based on audit logs. See Configure and enable audit alert rules.
Handle audit alerts: After enabling audit alert rules, review and respond to flagged activities in the audit alerts module. See View and handle audit alerts.