This topic describes how to collect inner-ActionTrail logs using the Log Service console.
Prerequisites
-
You have obtained permissions to use the inner-ActionTrail feature by submitting a ticket or contacting your sales manager.
-
You have authorized ActionTrail to use the AliyunActionTrailDefaultRole role to deliver logs to Log Service.
Click Cloud Resource Access Authorization and follow the on-screen instructions to complete the authorization. This one-time action must be completed by an Alibaba Cloud account during the initial configuration.
WarningDo not revoke the authorization or delete the AliyunActionTrailDefaultRole role. Otherwise, logs cannot be delivered to Log Service.
-
You have created a project and a Logstore. For more information, see Create a project and a Logstore.
Procedure
If you are using a RAM user to enable this feature, you must first grant the required permissions to the RAM user. For more information, see Authorize a RAM user.
Log on to the Simple Log Service console.
-
In the Import Data section, click Platform Operation Log (Inner-ActionTrail).
Alternatively, log on to the ActionTrail console. On the page, you can enable inner-ActionTrail log collection.
Important-
If you enable the inner-ActionTrail feature on the ActionTrail console, a dedicated Logstore named innertrail_<trail_name> is automatically created.
-
Settings configured on the Log Service console are not synchronized to the ActionTrail console. If you enable this feature on the Log Service console and then create a trail on the ActionTrail console, the configuration from the ActionTrail console overwrites the configuration on the Log Service console.
-
If you cannot find Platform Operation Log (Inner-ActionTrail) in the Import Data section of the Log Service console, or if you cannot find the page on the ActionTrail console, submit a ticket or contact your sales manager to request permissions for the inner-ActionTrail feature.
-
Select the destination project and Logstore, and then click Next.
-
On the Specify Data Source tab, click Next.
Important-
All inner-ActionTrail logs can be delivered to only one Logstore.
-
You can disable the inner-ActionTrail feature on the Specify Data Source tab.
-
If you enabled the feature on the ActionTrail console, delete the trail on the page to stop log delivery.
-
After you stop log delivery, new inner-ActionTrail logs are no longer delivered to the Logstore. Existing logs are automatically deleted from the Logstore after their retention period expires.
-
-
On the Configure Query and Analysis tab, click Next.
Log Service automatically enables and configures indexes for the Logstore that stores inner-ActionTrail logs.
Next steps
After inner-ActionTrail logs are collected in Log Service, you can query, analyze, download, ship, and process the logs, or create alerts. For more information, see Common operations on logs of Alibaba Cloud services.