How to use the intelligent audit feature-Smart Access Gateway(SAG)-阿里云帮助中心

Smart Access Gateway (SAG) intelligent audit automatically records your console actions as audit entries. You can create a subscription to periodically send these audit entries to a specified email address.

View audit entries

Log on to the SAG console.
In the top navigation bar, select the region.
In the left-side navigation pane, choose SAG > Intelligent Audit.
On the Intelligent Audit page, you can filter, view, or download audit entries.
- Filter audit entries
  
  On the Audit List tab, select filter criteria from the search box and click the
- View audit entry details
  
  In the Details column of an audit entry, click More to view its details.
- Download audit entries
  
  Click the

Create a subscription

Create a subscription to periodically send audit entries to a specified email address.

You can create a maximum of five subscriptions.
New subscriptions are enabled by default.
You can also manually export audit entries to an email address. For more information, see Manually export audit entries to an email address.

Log on to the SAG console.
In the top navigation bar, select the region.
In the left-side navigation pane, choose SAG > Intelligent Audit.
On the Intelligent Audit page, click the Audit List tab, and then click Subscribe.

In the Create Subscription dialog box, configure the following parameters and click OK.

Parameter	Description
Email Address	Enter one or more recipient email addresses. Separate multiple addresses with a comma (,).
Send At	Select a schedule for sending `audit entries`. Each email can contain a maximum of 100,000 entries. If the number of entries exceeds the limit, the system sends multiple emails.
SAG Instance ID/Name	Select the SAG `instances`. All SAG `instances` in the current `region` are selected by default.
Source	The source IP address of the operation. The default value is All.
Object	Select the audit objects. You can select all objects. Valid values: Important These audit objects appear in the `console` only after you apply the corresponding configurations to the SAG `instance`. ACL. CCN Configuration. Flow Log. Network Configuration. QoS Policy. Instance Configuration. App Configuration. Application Acceleration. Device Settings.

More operations

Actions	Steps
Manually export `audit entries` to an email address	Manually export `audit entries` to an email address. In the left-side navigation pane, choose SAG > Intelligent Audit. On the Intelligent Audit page, click the Audit List tab. To export selected `audit entries`: Select the desired `audit entries`. Click Export to Mail > Export Selected. To export all `audit entries`: Click Export to Mail > Export All. Note If you specify filter criteria in the search box, only the `audit entries` that match the criteria are exported. In the Export Information dialog box, enter the email address and click OK.
View subscription details	View the details of a created `subscription`. In the left-side navigation pane, choose SAG > Intelligent Audit. On the Intelligent Audit page, click the Subscription Details tab. The Subscription Details tab shows the details of created `subscriptions`.
Modify subscription details	Modify a `subscription` at any time after creation. In the left-side navigation pane, choose SAG > Intelligent Audit. On the Intelligent Audit page, click the Subscription Details tab. On the Subscription Details tab, find the target `subscription` and click Modify in the Operation column. In the Modify Subscription dialog box, modify the Email Address, Send At, SAG Instance ID/Name, or Object parameter, and then click OK.
Cancel a subscription	Cancel a `subscription` to stop receiving `audit entries`. In the left-side navigation pane, choose SAG > Intelligent Audit. On the Intelligent Audit page, click the Subscription Details tab. On the Subscription Details tab, find the target `subscription` and click Cancel Subscription in the Operation column.
Enable a subscription	Subscriptions are enabled by default. To resume receiving `audit entries` for a canceled `subscription`, re-enable it. In the left-side navigation pane, choose SAG > Intelligent Audit. On the Intelligent Audit page, click the Subscription Details tab. On the Subscription Details tab, find the target `subscription` and click Enable Subscription in the Operation column.
Delete a subscription	Delete a `subscription` that is no longer needed. Before you delete a `subscription`, you must cancel it. For more information, see Cancel a subscription. In the left-side navigation pane, choose SAG > Intelligent Audit. On the Intelligent Audit page, click the Subscription Details tab. On the Subscription Details tab, find the target `subscription` and click Delete in the Operation column. In the Delete Subscription dialog box, click OK.