Alibaba Cloud-Initiated Event Schema Reference - Simple Log Service - Alibaba Cloud - Simple Log Service

This topic describes the fields in an Alibaba Cloud-initiated event and provides an example.

Fields in an Alibaba Cloud-initiated event

Field	Description
EventID	The unique ID of the event.
EventVersion	The version of the event definition.
EventProduct	The name of the Alibaba Cloud service on which an operation is performed. For example, OSS.
EventName	The name of the event that corresponds to the API operation of the Alibaba Cloud service. For example, Set Bucket Quota Limit.
EventDescription	The reason for the operation. For example, the ID of a ticket, an internal O&M or change request, or a security scan.
EventType	The type of the operation. Valid values: CUSTOMER_INITIATED_SUPPORT A technical support operation that is performed by Alibaba Cloud personnel based on user authorization. For example, an operation event for ticket-based troubleshooting. ALIYUN_INITIATED_SERVICE An operation that is initiated by Alibaba Cloud personnel or systems for O&M purposes. For example, a cross-cluster bucket migration that is initiated because the cluster hardware is out of warranty. ALIYUN_INITIATED_PENALTY Management events are events in which Alibaba Cloud personnel or systems take action on user public data as required by law and regulations.
EmployeeID	The ciphertext of the globally unique ID of the Alibaba Cloud employee who performs the operation. This field is empty if the event is automatically triggered by a system program. This field is not empty if the event is triggered by a manual operation of an Alibaba Cloud technical engineer.
EventMethod	The method of the operation. Examples include regular read and write operations, read and write operations that use internal APIs, and other operations such as backup and recovery.
ResourceType	The type of the resource associated with the event. For example, ACS::ACK::Cluster.
ResourceID	The ID of the resource associated with the event. For example, an OSS bucket ID.
ResourceRegionID	The ID of the region where the resource associated with the event resides.
ResourceOwnerID	The ID of the Alibaba Cloud account to which the resource associated with the event belongs.
EventAdditionalDetail	Additional information about the event.
EventTime	The time when the operation occurred. The time is in UTC. For example, 2021-03-22T05:23:37Z.
EventLevel	The notification level for the customer. Valid values: NOTICE: The event is only recorded. WARNING: The event is recorded and an alert is sent to the customer.
EventLocation	The country where the Alibaba Cloud technical engineer performs the operation. For example, CN (the Chinese mainland).

Example

{
    "EmployeeID": "64tSfLheCbLra9ClKaUF86J4DkP84p3n6H6sc4BS****",
    "EventAdditionalDetail": "{\"filter\":\"user_id:153915067560****\",\"groupbys\":\"ts,storage_type\",\"max\":\"100000\",\"endts\":\"1616947199\",\"orderby\":\"ts\"}",
    "EventDescription": "requestID: 61167C65-B80D-4876-A573-D61DD4238AA2",
    "EventID": "4facb9c7-d970-4f53-af5b-4ee08f51****",
    "EventLevel": "NOTICE",
    "EventLocation": "CN",
    "EventMethod": "Regular Read",
    "EventName": "DescribeK8sResourceGroup",
    "EventProduct": "ACK",
    "EventTime": "2021-03-29T09:44:51Z",
    "EventType": "ALIYUN_INITIATED_SERVICE",
    "EventVersion": "1.0.0",
    "ResourceID": "cd63fb222a3be44a89df72686b343****",
    "ResourceOwnerID": "129242164613****",
    "ResourceRegionID": "cn-hangzhou",
    "ResourceType": "ACS::ACK::Cluster"
}