OceanBase Migration Service (OMS) supports operation audit. This topic describes how to view and download operation audit records, and set the retention period of operation audit records on the operation audit page as the admin user.
Background
On the System Parameters page, you can enable or disable operation audit by using the operation_audit_log.enable parameter. After operation audit is enabled, when an operation of the type supported by operation audit is performed, an operation record is automatically generated on the operation audit page. You can view and download operation audit records and set the retention period of operation audit records on the operation audit page. The operation audit feature can help you meet the security compliance requirements and trace the operations performed in OMS to identify the specific operators.
Limits
Only the admin user can view the information on the operation audit page and perform related operations. Common users cannot access the operation audit page.
View operation audit records
Log on to the OMS console.
In the left-side navigation pane, choose System Management > Operation Audit.
On the Audits page, view information such as the operation target, operation type, log type, and risk level. You can filter the content to view and click View Details in the Actions column.
The following table describes the scope of records that you can query on the operation audit page.
Category Record scope Operation targets Logon module, migration projects, synchronization projects, data sources, servers, components, system parameters, user management, alert settings, alert channels, alert information, associated OCP, operation audit, open APIs, tags, table addition and removal, O&M tickets, and overview Operation types Creation, deletion, modification, access, start, stop, logon, logoff, and others Risk levels Urgent, critical, moderate, and low Initiator roles Administrator and common user Operation results Successful and failed
Download operation audit records
Log on to the OMS console.
In the left-side navigation pane, choose System Management > Operation Audit.
On the Operation Audits page, specify the execution time range of the records to download, and click Export Audit Records to download the records as a CSV file to your local computer.
OMS allows you to download the operation audit records of the last 7 days, 15 days, 30 days, and 6 months.
Set the retention period of operation audit records
Log on to the OMS console.
In the left-side navigation pane, choose System Management > Operation Audit.
On the Audits page, click the Set Retention Period icon.
In the Set Retention Period dialog box, specify the record retention period. The maximum retention period is 1095 days.
Note:
On the System Parameters page, you can modify the value of the
operation_audit_log.retention_timeparameter to set the retention period of operation audit records.Click OK.
