Management operation audit

Limitations

• ActionTrail can query only events tracked by a single-account trail.

  Note

  To query events from a multi-account trail, you must query them in the destination Simple Log Service (SLS) or Object Storage Service (OSS). For more information, see Create a multi-account trail.

• ActionTrail can query only events from the last 90 days in the target region.

  Note

  • To query events older than 90 days, you must create a single-account trail and deliver the events to SLS or OSS. For more information, see Create a single-account trail.

  • To query events older than 90 days across multiple regions or use multiple filter conditions, use advanced event query. For more information, see Perform custom event queries.

• After you perform a management operation in ApsaraDB for SelectDB, the event becomes queryable in ActionTrail after about 10 minutes.

• Events become queryable in the ActionTrail console about 10 minutes after they occur.

Billing

• ActionTrail is enabled by default. You can access the ActionTrail console with any valid Alibaba Cloud account that has passed real-name verification and has no overdue payments.

• ActionTrail is currently free of charge.

  Important

  ActionTrail will start charging for some features in the future. You will receive a notification one month before charges take effect.

• If you create a trail to deliver events to Simple Log Service (SLS) or Object Storage Service (OSS), separate charges from SLS and OSS apply based on their pricing.

  • For SLS pricing, see Billing overview.

  • For OSS pricing, see Billing overview.

Procedure

1. Log on to the ApsaraDB for SelectDB console.

2. In the left-side navigation pane, click Operation Audit. This opens the Query Event page in the ActionTrail console.

3. On the Query Event page, ActionTrail has already filtered events for ApsaraDB for SelectDB by service name. Choose a query method based on your scenario.

   Use case	Query method	References
   Query management events from the last 90 days	Event detail query You can use a single filter condition to query management events from the last 90 days.	Query events in the ActionTrail console
   Query events older than 90 days	Advanced event query After you enable advanced features on a trail, you can use multiple filter conditions to query management events, data events, and Insights events that are older than 90 days.	Custom event queries
   Query exceptional events	Insights event query You can use a single filter condition to query exceptional events in specific scenarios from the last 90 days. For example, an IPInsight event records access from an unusual IP address to help identify potential security risks. This query currently supports only management events.	Query Insights events in the ActionTrail console

Related topics

To learn more about ActionTrail, see What is ActionTrail?.