Simple Log Service:Collect RDS SQL audit logs

Procedure

1. Log on to the Simple Log Service console.

2. In the Import Data section, click RDS Audit - cloud service.

3. On the Select Logstore tab, select the destination project and Logstore, and then click Next.

4. On the Data Source Configuration tab, complete the RAM. Enable Shipping > Next.

   Important

   • If Simple Log Service is not authorized to ship logs, click Authorize next to RAM and follow the prompts. This creates a RAM role named AliyunLogArchiveRole that Simple Log Service uses to collect logs.

   • If your RDS instance is not listed or data shipping cannot be enabled, verify that the instance meets the prerequisites above.

   The page indicates that logs from an RDS instance can be shipped only to a Logstore in the same region. The instance list includes columns such as Instance name, DB engine, Region, Enable data shipping (switch), and Destination. Find your target instance in the list and turn on the switch to enable data shipping.

5. On the Query and Analysis Configurations tab, click Next.

   Simple Log Service automatically enables and configures an index for the Logstore that stores RDS SQL audit logs. If you need to modify the index settings, see Create an index.