Help Center/ Distributed Cache Service/ User Guide/ Diagnosing and Analyzing an Instance/ Viewing Audit Logs of a DCS Redis Instance
Updated on 2024-11-18 GMT+08:00
View PDF
Share

Viewing Audit Logs of a DCS Redis Instance

Command audit logs on the DCS console record client operations on DCS. The storage, query, and analysis of audit logs are provided by Log Tank Service (LTS).

Currently, only Proxy Cluster DCS Redis 4.0 and later instances in the CN Beijing4 & Shanghai1–2 & Guangzhou regions support command audit logs.

If audit logs are still not displayed on the console, contact technical support to upgrade your proxies.

Enabling audit logging will create a log group, log stream, and dashboard in LTS. Fees are generated based on the log volume. For details, see LTS pricing details.

  • Enabling audit logging will restart all proxy nodes. Ensure that the client can re-connect.

    Without capacity expansion or node migration since the last enabling, re-enabling audit logging will not restart proxy nodes.

  • Enabling audit logging may deteriorate DCS instance performance or cause some logs to be lost if the write traffic and QPS are too heavy.

Notes and Constraints

  • Ensure that you have permissions to create log groups and log streams in LTS.
  • Enable audit logging for new instances 10 minutes after they are successfully created.
  • Audit logging will be automatically disabled when you scale the instance or migrate nodes. To use this function, you need to enable it again.
  • After enabling audit logging, you can change the log retention period (one day by default) on the LTS console.

Viewing Audit Logs of a DCS Redis Instance

  1. Log in to the DCS console.
  2. Click in the upper left corner of the management console and select the region where your instance is located.
  3. In the navigation pane, choose Cache Manager.
  4. Click a DCS instance to go to the details page.
  5. Choose Logs > Audit Logs.
  6. Click Enable Audit Logging if required.
  7. The corresponding log group and log stream are created in LTS. Write commands are reported to LTS through the proxy nodes.
  8. View the audit logs, as shown in the following figure.

    Figure 1 Audit logs

More Operations

  • Disabling audit logging
    To disable the function, click Disable Audit Logging in the upper right corner. After the function is disabled, commands will not be recorded.
    • If some logs are not yet reported by the time you disable audit logging, they continue to be reported.
    • After audit logging is disabled, the log group and log stream on LTS will be retained and will not generate fees.
    • You can manually delete log groups and log streams on the LTS console.
  • Changing the log retention period

    In the log group list of the LTS console, click Modify in the Operation column of the desired log group to change the log retention period.

    Figure 2 Modifying the log retention period or deleting a log group