Cassandra audit logs

Background information

ActionTrail is an Alibaba Cloud service that records and delivers logs for operations on your Alibaba Cloud account resources. You can use ActionTrail to view and retrieve behavioral logs. You can also deliver logs to a Simple Log Service Logstore or a specified OSS bucket for real-time auditing and issue analysis.

Cassandra operation logs

Cassandra audit logs consist mainly of API events. For OpenAPI events, the value of eventType is recorded as ApiCall in ActionTrail. For more information, see Cassandra API reference.

Example of a Cassandra operation log

The following code shows an example of an ActionTrail log for creating a Cassandra instance. This log provides detailed information about the operation on the Cassandra cluster:

{
  "eventId": "def79400-0f1e-489a-a1c2-b*********",
  "eventVersion": 1,
  "eventSource": "cassandra.aliyuncs.com",
  "userAgent": "AliyunConsole",
  "eventType": "ConsoleOperation",
  "referencedResources": {
    "ACS::Cassandra::Cluster": [
      "cds-t4n7c886*******"
    ]
  },
  "userIdentity": {
    "accountId": "17926974*****",
    "principalId": "227691078*******",
    "type": "ram-user",
    "userName": "cassandra"
  },
  "serviceName": "Cassandra",
  "requestId": "def79400-0f1e-489a-a1c2-b*******",
  "eventTime": "2020-11-17T14:42:34Z",
  "isGlobal": false,
  "acsRegion": "ap-southeast-1",
  "eventName": "Create"
}