The log module in IDaaS EIAM records detailed user behavior, helping you monitor and manage user access activities. This topic describes how to use the User tab in the log module to query and manage logs.
Overview
Detailed user behavior logs: Logs user operations, including key details such as specific user actions, timestamps, operation objects, and event results.
Monitoring and auditing: Enables administrators to monitor, audit, and manage user activities. This helps you quickly detect anomalies, troubleshoot issues, and perform security audits.
Multi-dimensional filtering: Supports filtering logs by various criteria, such as time range and operator type.
Tabular display: Displays detailed logs in a table that includes key information such as time, operator, and event type.
Log export: Supports exporting logs to Alibaba Cloud Simple Log Service (SLS).
Procedure
Access the log module
Log on to the IDaaS console.
In the left-side navigation pane, select EIAM.
Select the target IDaaS instance and click Manage in the Actions column. Then, navigate to .
Set query conditions
On the User tab, you can set various conditions to filter log records:
Time range: Select a time range for the logs. You can choose a preset period, such as the last week, last month, last three months, or last six months, or specify a custom time range.
Advanced search
Operator type: Select the type of operator, such as an IDaaS account, IDaaS application, RAM user, or RAM role.
Event type: Select a specific event type, such as All event types, Account joining organization, or registering authenticator.
Object type: Select the object type, such as an account, organization, user group, identity provider, or application.
Event result: Select the result of the event, such as Success/Skipped or Failed.
Run the search
After setting the filter conditions, click Search.
To clear all filter conditions, click Reset.
Select Search and collapse to automatically hide the filter panel after the search, providing a cleaner interface.
View log details
The search results are displayed in a table at the bottom of the page. The table includes the following columns:
Time: The time when the event occurred.
Operator: The ID or name of the operator that performed the action.
Event type: The type of operation performed, such as basic authentication or user CAPTCHA verification.
Operation object: The target of the operation, such as the User Portal or a password.
Event result: The result of the operation, such as Success or Failed.
Click a log entry to view more details.