View audit alerts
Audit alerts log detailed information about database activity. By reviewing these alerts, you can track potential malicious behavior or unauthorized access, investigate the cause of security incidents, and meet compliance requirements. This topic describes how to view audit alerts.
Prerequisites
The security audit (new version) feature must be enabled. For more information, see Enable security audit (new version).
View audit alerts for a single instance
Log on to the DAS console.
In the navigation pane on the left, click .
Find the target instance and click the instance ID to open the instance details page.
-
In the left-side navigation pane, click Security Audit.
-
On the Security Audit page, click .
-
View the audit alerts for the database instance.
-
Analysis mode
Select a time range. DAS displays database activities within that period in reverse chronological order.
To view the details of a log record, click Details in the Actions column.
-
List mode
To view the details of a log record, click Details in the Actions column.
-
View audit alerts for all instances
If you have multiple database instances with security audit enabled, you can view audit alerts for all of them.
Log on to the DAS console.
-
In the left-side navigation pane, choose Security Center > Security Audit.
-
On the Security Audit page, click .
-
View the audit alerts for the database instances.
-
Analysis mode
Select a time range. DAS displays database activities within that period in reverse chronological order.
To view the details of a log record, click Details in the Actions column.
-
List mode
To view the details of a log record, click Details in the Actions column.
-
Export logs
Log on to the DAS console.
In the navigation pane on the left, click .
Find the target instance and click the instance ID to open the instance details page.
-
In the left-side navigation pane, click Security Audit.
-
On the Security Audit page, click .
-
Select a time range and specify other filter conditions, and then click Search.
-
Click Export.
This exports all log records displayed on the current page.
Related documents
By default, DAS enables all built-in database audit rules. If you do not need some of these rules, you can disable them. For more information, see Configure alert rules.