Inner-ActionTrail overview

更新时间:
复制 MD 格式

ActionTrail provides the Inner-ActionTrail feature. You can use this feature to deliver platform event logs from ActionTrail to Log Service. This feature lets you collect, analyze, transform, and consume platform event logs in real time. This topic describes the resources, billing, and limits that are related to the Inner-ActionTrail feature.

Note

Currently, Inner-ActionTrail supports collecting Alibaba Cloud-initiated events from Key Management Service (KMS), Data Security Center (DSC), Object Storage Service (OSS), Elastic Compute Service (ECS), ApsaraDB RDS, Container Service for Kubernetes (ACK), Container Registry (ACR), and E-MapReduce.

Scenarios

  • Track Alibaba Cloud-initiated events to find the cause of asset changes.

  • View, audit, and evaluate these events in near-real-time.

  • Store these events in your own data and computing centers.

Features

  • Classified protection compliance: Store Alibaba Cloud-initiated events for six months or longer to meet classified protection compliance requirements.

  • Simple configuration: You can easily configure and collect Alibaba Cloud-initiated events in real time.

  • Real-time analysis: Uses Simple Log Service to provide near-real-time log analysis and out-of-the-box report centers. This provides a clear overview of the details of these events.

  • Real-time alerting: You can configure custom near-real-time monitoring and alerting based on specific metrics. This ensures that you can respond promptly to critical business exceptions.

  • Ecosystem integration: Supports integration with other services, such as stream computing, cloud storage, and visualization, to further unlock the value of your data.

Asset Description

  • Custom project and Logstore

    • By default, indexing is enabled for this Logstore, and indexes are configured for some fields.

    • By default, this Logstore stores management events permanently. You can also change the storage duration. For more information, see Manage a Logstore.

    Note

    Do not delete the Simple Log Service project and Logstore related to Inner-ActionTrail. Otherwise, management events cannot be delivered to Simple Log Service.

  • Dedicated dashboards

    By default, dashboards named innertrail_trail_name_audit_center_cn and innertrail_trail_name_audit_center_en are generated. These dashboards show real-time data about cloud resource operations, including page views (PVs), unique visitors (UVs), the number of source services, event source distribution, and trends in PVs and UVs.

    Note

    Dedicated dashboards may be upgraded and updated at any time. Do not modify the dedicated dashboards. You can create custom dashboards to display query results. For more information, see Create a dashboard.

Billing

  • Currently, ActionTrail does not charge extra fees for Inner-ActionTrail.

  • After ActionTrail delivers Alibaba Cloud-initiated events to Simple Log Service, Simple Log Service charges fees based on storage space, read traffic, number of requests, data transformation, and data shipping. For more information, see Billable items of the pay-by-feature billing model.

Limits

  • You need to submit a ticket or request whitelist access from your sales manager to obtain permission to use Inner-ActionTrail.

  • Simple Log Service must be active and have no overdue payments.

  • You can create only one trail.

  • All Alibaba Cloud-initiated events can be delivered to only one Logstore.

  • The dedicated Logstore does not support writing other data. However, there are no special limits on features such as statistics, alerting, or consumption.