检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
If you back up logs to OBS, an OBS bucket will be automatically created to store the logs Buckets are billed per use. For details about OBS pricing, see Pricing Details. Parent topic: Logs
Click the OBS tab and click Import. In the Import OBS Bucket dialog box, select an OBS bucket (for example, dbss-audit-agent-{projectid}). Select the cluster and namespace described in Table 1. Click OK. The imported OBS bucket will be displayed in the OBS list.
Can Database Audit Logs Be Directly Saved to OBS? Backup Gets Stuck at the Backup File Uploading Phase
Commercial use Adding Audit Scope 1 Alarm on log backup failure If your logs fail to be backed up to OBS, database audit will report an alarm. You can query and handle the alarm monitoring page. Commercial use Viewing the Alarms April 2020 No.
Commercial use Adding Audit Scope 1 Alarm on log backup failure If your logs fail to be backed up to OBS, database audit will report an alarm. You can query and handle the alarm monitoring page. Commercial use Viewing the Alarms April 2020 No.
If permission application scenarios are involved, you can use an authorized account to create an OBS bucket in advance. obs:object:PutObject When the agent is deployed in the CCE scenario, the instance configuration information is uploaded to the OBS bucket.
Installing the Agent on CCE Cluster Nodes Importing Configurations to OBS Creating a ConfigMap Creating an Agent DaemonSet Workload Parent topic: Deploying the Database Audit Agent in a Container
Public services, such as Elastic Cloud Server (ECS), Elastic Volume Service (EVS), Object Storage Service (OBS), Virtual Private Cloud (VPC), Elastic IP (EIP), and Image Management Service (IMS), are shared within the same region.
If the backup function is enabled, logs and backup logs will also be stored in OBS for same duration. However, the storage duration also depends on the disk capacity of the log database.
Audit logs that have been backed up to the OBS bucket are not deleted. Prerequisites The account for logging in to the management console has been granted the DBSS System Administrator, ECS Administrator, VPC Administrator, and BSS Administrator roles.
Audit logs that have been backed up to the OBS bucket are not deleted. Prerequisites The account for logging in to the management console has been granted the DBSS System Administrator, ECS Administrator, VPC Administrator, and BSS Administrator roles.
The options are as follows: Audit traffic exceeds threshold CPU exceptions Memory exceptions Disk exceptions Insufficient audit log storage Log backup to OBS failed Agent exceptions Risky operations Alarm Risk Severity Risk severity of an alarm.
Click to configure. 2020/01/14 20:27:08 Bucket Name Name of the OBS bucket used for backup. Its options are as follows: Create Default Bucket Select Bucket NOTE: If you click Create Default Bucket, you will be prompted to authorize OBS for exporting audit log backups.
Public services, such as Elastic Cloud Server (ECS), Elastic Volume Service (EVS), Object Storage Service (OBS), Virtual Private Cloud (VPC), Elastic IP (EIP), and Image Management Service (IMS), are shared within the same region.
Object Storage Service (OBS) is an object-based cloud storage service.
You can also select OBS Recovery, enter the security password, OBS endpoint, bucket name, and backup storage path. Click Confirm. Parent topic: Platform Management
Set Name to the PVC of the OBS bucket created in Importing Configurations to OBS. Set Container Path for the storage (for example, /tmp/dbss/agent). Click OK. If your database configurations changed, you need to add a new cloud volume and remove the old one.
You can enable automatic backup in DBSS to back up audit data to OBS buckets. Automatic backup requires fine-grained OBS authorization. For details, see Backing Up and Restoring Database Audit Logs. Log in to the management console.
Adding a Database and Exporting Database Configurations Add a database to be audited, enable the audit function, and import the database configurations to Object Storage Service (OBS).
"obs:object:PutObjectAcl", "obs:object:GetObjectVersion", "obs:object:GetObject", "obs:object:GetObjectVersionAcl", "obs:bucket:HeadBucket", "obs:object:GetObjectAcl", "obs:bucket:CreateBucket
