ApsaraDB for MongoDB introduces an official audit log feature powered by Log Service. Use this feature to query, analyze, and export audit logs to monitor the security and performance of your instances.
Scope
This feature is available for ApsaraDB for MongoDB instances that use general-purpose local disks and dedicated local disks.
Changes
- The official edition of the audit log feature is now available.The following table compares the features of the free trial edition and the official edition.
Comparison item Free trial edition Official edition Retention period Fixed at 1 day. You can set the retention period. The value can range from 1 to 365 days. The default is 30 days. Important Before changing this setting, determine a suitable retention period for all instances in that region.Maximum storage usage In the current region, all instances that have the free trial edition enabled share 100 GB. Unlimited. - The official edition of audit logs is a pay-as-you-go service based on storage usage and retention period.
For pricing details, see ApsaraDB for MongoDB Detailed Pricing.
- Applications for the free trial edition are now closed.
Recommendations
- Enable or disable the official audit log feature
The official audit log feature is disabled by default and must be enabled manually. For more information, see Enable audit logs.
To avoid unnecessary charges, disable the official audit log feature if you no longer need it. For more information, see Disable audit logs.
- If you have enabled the free trial edition of the audit log, you can perform the following operations after the official edition is launched.
Business requirement Procedure Use the official audit log feature You can manually upgrade the free trial edition to the official edition. On the Audit Logs page, click Upgrade to Official Edition in the upper-right corner.
Continue to use the free trial audit log feature No action is required. Stop using the audit log feature Disable the free trial audit log feature. - Download audit logs to prevent the loss of existing log data for the instance.
For more information, see Download audit logs.
- Disable the free trial audit log feature.
On the Audit Logs page, click Disable Audit Logs in the upper-right corner.
- Download audit logs to prevent the loss of existing log data for the instance.
- To reduce your audit log costs, you can use the following methods.
Method Risk References Use a shorter retention period This reduces how far back you can trace audit history. Modify the retention period for audit logs Select fewer audit operation types If you deselect an audit operation type, logs for that operation are no longer generated. Note After an audit operation type is deselected, only the existing audit log data for that type is retained for the specified retention period.For example, if the audit log retention period is 5 days and the selected audit operation types are admin, slow, and query, and you deselect query at 00:00:00 on October 10, 2022, audit logs for query operations are no longer saved. The query audit logs generated from 00:00:00 on October 5, 2022, to 00:00:00 on October 10, 2022, will gradually expire and then be automatically deleted.
Modify audit operation types Disable audit logs After disabling audit logs, the system stops uploading audit logs for the instance. You cannot trace access operations that occur after this point. Note After disabling this feature, only the audit log data within the specified retention period is retained.For example, if the audit log retention period is 5 days and you disable audit logs at 00:00:00 on October 10, 2022, logs generated after this time are not saved. The logs generated from 00:00:00 on October 5, 2022, to 00:00:00 on October 10, 2022, will gradually expire and then be automatically deleted.
Disable audit logs
FAQ
- Q: After the official audit log is launched, can I continue to use the free trial edition?
A: Yes, you can continue to use your existing free trial edition, but new applications are no longer accepted.
- Q: Why are new applications for the free trial edition being discontinued?
A: The free trial edition has a retention period of only 1 day and a shared storage space of 100 GB per region. These limits are often insufficient for real-world business needs, which typically demand longer retention periods and greater storage.
- Q: How can I view the storage usage of the official audit log?A: On the Audit Log page of the target instance, you can view the storage usage in the upper-left corner.