Audit operations

2025-05-28 08:26:41  Updated

OceanBase Admin Toolkit (OAT) provides the operation audit feature to meet the security and compliance requirements. This feature records the O&M operations performed in the OAT console in real time and allows you to query the operation records.

To use this feature, perform the following operations: Log in to the OAT console. In the left-side navigation pane, choose Systems and Security > Operation Audit. On the Operation Audit page, view records on different pages and filter records by time. By default, the Operation Audit page displays records of the previous 24 hours. You can query records of the previous 24 hours, previous 7 days, previous 30 days, or a custom time range. You can also search for records by resource name. The Operation Audit page displays the following information:

  • Resource type: the type of the resource on which an operation is performed. You can filter records by resource type. By default, records are retained for one year.

  • Resource operation

    Resource type Operation
    Component Create a component
    Uninstall a component
    Take over a component
    Modify a component
    Service Create a service
    Uninstall a service
    Take over a service
    Modify a service
    Upgrade a service
    Tool Create a tool
    Configure a tool
    Uninstall a tool
    Server Add a server
    Edit a server
    Delete a server
    Credential Create a credential
    Modify a credential
    Delete a credential
    Package Scan a package
    Delete a package
  • Resource name:

    • The name of the resource on which an operation is performed, such as the IP address of a server, a service name, or a component name.
    • If an operation is performed on resources of different types, such as OceanBase Cloud Platform (OCP), OceanBase Developer Center (ODC), and OceanBase Migration Service (OMS), each resource name is displayed in the type/name format. Example: OCP/MyOCP.
  • Operation information: a JSON string that contains the operation request.

  • Operator: the name of the user that initiates an operation. You can filter records by operator.

  • Source IP address: the IP address of the client that initiates an operation.

  • Execution time: the start time of an operation. You can sort records by execution time. By default, records are sorted by execution time in descending order.

  • Execution result: the execution result of an operation, including Successful and Failed.

Contact Us