Tablestore:View audit logs in the ActionTrail console

Usage notes

By default, ActionTrail records only management events of Tablestore and retains operation events for only the last 90 days. To audit data events or query events that occurred more than 90 days ago, you must create a trail to deliver management events and data events to Simple Log Service, Object Storage Service (OSS), or MaxCompute. For more information, see Use the advanced event query feature to query events.

Procedure

By default, ActionTrail retains operation events for only the last 90 days. You can view Tablestore operations within the last 90 days on the Event Query page in the ActionTrail console.

1. Log on to the ActionTrail console.

2. In the left-side navigation pane, choose Events > Event Query.

3. In the top navigation bar, select the destination region.

4. On the Event Query page, select Service Name and set it to Tablestore(OTS), and select the time range based on your business requirements.

   Note

   You can also filter events by using a single search condition such as Event Name, Operator, Read/Write Type, Resource Type, Resource Name, AccessKey ID, Source IP Address, Event ID, Event Type, or Sensitive Action.

   The system automatically displays the list of Tablestore-related events.

   

5. View event details.

   1. Click View Details in the Actions column of the target event.

   2. In the View Details panel, view the detailed event information and event list.

      

   3. Click Event Record in the Actions column of an event to view the event record code.

References

• Billing overview

• Configure alert rules