ALB operation log
The Application Load Balancer (ALB) operation log feature lets you audit and monitor operations on your ALB resources. It records actions your Alibaba Cloud account performs on these resources through the console, OpenAPI, or other methods.
Background information
ALB integrates with ActionTrail, allowing you to query management events from user operations on ALB. ActionTrail can deliver these management events to a Logstore in Simple Log Service or a bucket in Object Storage Service. This supports real-time auditing and incident analysis.
View operation logs
The ALB console lets you query events from the last 90 days within a single Alibaba Cloud account and region, but you can filter by only one attribute. For queries that span longer periods, multiple accounts, or multiple regions, or for those that require multiple attributes and custom SQL, you must first create a trail and then use the advanced event query feature.
-
Log on to the ALB console.
-
In the left-side navigation pane, choose .
-
In the top navigation bar, select the region that you want to query.
-
On the Operation Log page, set the search criteria and specify a time range to filter the logs.
You can filter events based on a single condition, such as Read/Write Type, Event Name, Operator, Resource Type, Resource Name, Event Type, or Sensitive Action.
-
In the filtered list of events, find the event that you want to inspect and click View Details in the Actions column to view the event details and record.
NoteFor more information about event fields, see Management event structure.
ALB audit events
|
Event |
Description |
|
AddEntriesToAcl |
IP entries are added to an access control list (ACL). |
|
AddServersToServerGroup |
Backend servers are added to the specified server group. |
|
ApplyHealthCheckTemplateToServerGroup |
A health check template is applied to a server group. |
|
AssociateAclsWithListener |
ACLs are associated with a listener. |
|
AssociateAdditionalCertificatesWithListener |
Additional certificates are added to a listener. |
|
AttachCommonBandwidthPackageToLoadBalancer |
An elastic IP address (EIP) bandwidth plan is associated with an ALB instance. |
|
Create |
AnALB instance is purchased on the buy page. |
|
CreateAcl |
An ACL is created. |
|
CreateAScripts |
A programmable script is created. |
|
CreateHealthCheckTemplate |
A health check template is created. |
|
CreateListener |
A listener is created. |
|
CreateLoadBalancer |
An ALB instance is created. |
|
CreateRule |
A forwarding rule is created. |
|
CreateRules |
Multiple forwarding rules are created. |
|
CreateSecurityPolicy |
A custom security policy is created. |
|
CreateServerGroup |
A server group is created. |
|
DeleteAcl |
An ACL is deleted. |
|
DeleteAScripts |
A programmable script is deleted. |
|
DeleteHealthCheckTemplates |
Multiple health check templates are deleted at a time. |
|
DeleteListener |
A listener is deleted. |
|
DeleteLoadBalancer |
An ALB instance is deleted. |
|
DeleteRule |
A forwarding rule is deleted. |
|
DeleteRules |
Multiple forwarding rules are deleted at a time. |
|
DeleteSecurityPolicy |
A custom security policy is deleted. |
|
DeleteServerGroup |
A server group is deleted. |
|
DescribeRegions |
The regions that are supported by ALB are queried. |
|
DescribeZones |
The zones in a region are queried. |
|
DetachCommonBandwidthPackageFromLoadBalancer |
An Internet Shared Bandwidth is disassociated from an ALB instance. |
|
DisableDeletionProtection |
The deletion protection feature is disabled for an ALB instance. |
|
DisableLoadBalancerAccessLog |
The access log feature is disabled for an ALB instance. |
|
DisableLoadBalancerIpv6Internet |
IPv6 Internet bandwidth is disabled for an ALB instance. |
|
DissociateAclsFromListener |
ACLs are disassociated from a listener. |
|
DissociateAdditionalCertificatesFromListener |
Additional certificates are removed from a listener. |
|
EnableConfigManaged |
The configuration management feature is enabled for an ALB instance. |
|
EnableDeletionProtection |
The deletion protection feature is enabled for an ALB instance. |
|
EnableLoadBalancerAccessLog |
The access log feature is enabled for an ALB instance. |
|
EnableLoadBalancerIpv6Internet |
IPv6 Internet bandwidth is enabled for an ALB instance. |
|
GetGlobalLoadBalancerSummary |
The summarized information about global server load balancing is queried. |
|
GetHealthCheckTemplateAttribute |
The details of a health check template are queried. |
|
GetListenerAttribute |
The details of a listener are queried. |
|
GetListenerHealthStatus |
The health check status of a listener is queried. |
|
GetLoadBalancerAttribute |
The details of an ALB instance are queried. |
|
InitializeServiceLinkedRole |
The service-linked role is initialized. |
|
ListAclEntries |
IP entries of an ACL are queried. |
|
ListAclRelations |
The listeners that are associated with an ACL are queried. |
|
ListAcls |
The ACLs in a region are queried. |
|
ListAScripts |
Programmable scripts are queried. |
|
ListAsynJobs |
Asynchronous tasks are queried. |
|
ListBackupVersions |
Configuration backups are queried. |
|
ListHealthCheckTemplates |
Health check templates are queried. |
|
ListListenerCertificates |
The certificates that are associated with a listener are queried. |
|
ListListeners |
Listeners are queried. |
|
ListLoadBalancerLocalAddress |
The back-to-origin routes of an ALB instance are queried. |
|
ListLoadBalancers |
ALB instances are queried. |
|
ListRules |
Forwarding rules are queried. |
|
ListSecurityPolicies |
Custom security policies are queried. |
|
ListSecurityPolicyRelations |
The listeners that are associated with specified security policies are queried. |
|
ListServerGroups |
Server groups are queried. |
|
ListServerGroupServers |
The backend servers in a server group are queried. |
|
ListSystemSecurityPolicies |
System security policies are queried. |
|
ListTagKeys |
The tag keys of an ALB instance are queried. |
|
ListTagResources |
The keys and values of tags that are added to resources are queried. |
|
ListTagValues |
The tag values of an ALB instance are queried. |
|
Modify |
The specifications of an ALB instance are modified on the buy page. |
|
MoveResourceGroup |
A resource is moved from one resource group to another. |
|
Release |
A resource such as an ALB instance is released. |
|
RemoveEntriesFromAcl |
IP entries are removed from an ACL. |
|
RemoveServersFromServerGroup |
Backend servers are removed from a server group. |
|
ReplaceServersInServerGroup |
Backend servers in a server group are replaced. |
|
SerializeLoadBalancer |
The configurations of an ALB instance are serialized. |
|
SerializeServerGroup |
The configurations of a server group are serialized. |
|
ServiceManagedControl |
ALB resources are managed. |
|
StartListener |
A listener is started. |
|
StopListener |
A listener is stopped. |
|
TagResources |
Tags are added to resources. |
|
UnSerializeLoadBalancer |
The configurations of an ALB instance are deserialized. |
|
UnTagResources |
Tags are removed from resources. |
|
UpdateAclAttribute |
The attributes of an ACL are modified. |
|
UpdateAScripts |
Programmable scripts are modified. |
|
UpdateHealthCheckTemplateAttribute |
The attributes of a health check template are modified. |
|
UpdateListenerAttribute |
The configurations of a listener are modified. |
|
UpdateListenerLogConfig |
The log configurations of a listener are modified. |
|
UpdateLoadBalancerAddressTypeConfig |
The network type of an ALB instance is changed. |
|
UpdateLoadBalancerAttribute |
The attributes of an ALB instance are modified. |
|
UpdateLoadBalancerBillingConfig |
The billing configurations of an ALB instance are modified. |
|
UpdateLoadBalancerEdition |
The edition of an ALB instance is changed. |
|
UpdateLoadBalancerZones |
The zones of an ALB instance are modified. |
|
UpdateRuleAttribute |
The attributes of a forwarding rule are modified. |
|
UpdateRulesAttribute |
The attributes of forwarding rules are modified. |
|
UpdateSecurityPolicyAttribute |
The attributes of a security policy are modified. |
|
UpdateServerGroupAttribute |
The configurations of a server group are modified. |
|
UpdateServerGroupServersAttribute |
The configurations of backend servers in a server group are modified. |