Tablestore:View audit logs (ActionTrail console)

Usage notes

By default, ActionTrail records only management events for Tablestore and retains them for the last 90 days. To audit data events or query events older than 90 days, you must create a trail to deliver management events and data events to Simple Log Service, Object Storage Service (OSS), or MaxCompute. For more information, see Advanced event query.

Procedure

The Event Query page in the ActionTrail console displays Tablestore events from the last 90 days.

1. Log on to the ActionTrail console.

2. In the left-side navigation pane, choose Events > Event Query.

3. In the top navigation bar, select the target region.

4. On the Event Query page, set Service Name to Tablestore(OTS), and select a time range as needed.

   Note

   You can also filter events by Event Name, Operator, Read/Write Type, Resource Type, Resource Name, AccessKey ID, Source IP Address, Event ID, Event Type, and Sensitive Action. Data events appear in the list only if you have created a trail to collect them. For more information, see Usage notes.

   The console then displays a list of matching Tablestore events.

   

5. View event details.

   1. Click View Details in the Actions column of the target event.

   2. In the View Details panel, view the detailed information and event list.

      

   3. Click Event Record in the Actions column of an event to view the raw event record.

References

• Billing overview

• Configure alert rules for ActionTrail events