This topic describes how to enable the log shipping feature in the ActionTrail console. After you enable the log shipping feature, you can ship operations logs of cloud services from ActionTrail to Log Service.
Prerequisites
ActionTrail is authorized to use the AliyunActionTrailDefaultRole role to ship logs to Log Service.You can go to the Cloud Resource Access Authorization page to complete the authorization. This operation is required only when you enable the log shipping feature for the first time. You must complete the authorization by using your Alibaba Cloud account.
Warning To ensure that operations logs can be shipped to Log Service, do not revoke permissions from the AliyunActionTrailDefaultRole role or delete the AliyunActionTrailDefaultRole role.
Procedure
Important Before you can use a RAM user to enable the log shipping feature, you must grant the required permissions to the RAM user. For more information, see Authorize a RAM user to use the access log feature.
- Log on to the ActionTrail console.
- In the left-side navigation pane, choose .
- On the Create Trail page, set the required parameters.For more information about how to set the parameters, see Create a single-account trail.