检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
DDS supports audit logs that record your operations on databases or collections, helping you audit database security and analyze root cause of faults. Fine-grained permission management is supported.
The files (backup files, slow query log files, audit log files, and error log files) stored on OBS are invisible to you. They are only visible in the DDS backend management system.
Migrating data using the export and import tools Migrating data from other cloud MongoDB to DDS Migrating data from on-premises MongoDB to DDS Migrating data from ECS-hosted MongoDB to DDS Migrating data from DDS to MongoDB Logs Error logs, slow query logs, and audit logs are supported
Audit Logs An audit log records operations performed on your databases and collections. The generated log files are stored in OBS. Auditing logs can enhance your database security and help you analyze the cause of failed operations.
If you need to collect statistics on all operations, see Audit Log Policy Management. Procedure Log in to the management console. Click in the upper left corner and select a region and a project.
Configuring the Audit Policy The audit function can be used to record all database operations performed by users. Auditing logs can enhance your database security and help you analyze the cause of failed operations to improve system O&M. For details, see Audit Logs.
Requires procurement of an audit system. Database backup Automated backup is supported. You can configure backup policies based on service requirements. You can create manual or physical backups at any time. DDS helps increase backup efficiency by 3 times.
The options are as follows: audit_log Range audit_log Default Value N/A Example Requests Disabling audit log reporting to LTS for a DB instance DELETE https://{endpoint}/v3/619d3e78f61b4be68bc5aa0b59edcf7b/instances/logs/lts-configs { "lts_configs" : [ { "instance_id" :
Invalid audit log ID. Check whether the audit log ID is valid. 400 DBS.239024 The auditlog does not exist. The audit log does not exist. Check whether the audit log exists. 400 DBS.239025 Invalid auditlog scope. Invalid audit scope.
You can deploy DB instances in multiple AZs and use audit logs, isolated networks, security groups, and data encryption to ensure data security.
You can deploy DB instances in multiple AZs and use audit logs, isolated networks, security groups, and data encryption to ensure data security.
January 2025 Added new fields to audit logs. Added a limit on the number of pipeline stages. December 2024 Fixed the SERVER-14322 vulnerability. Added dynamic CPU monitoring. Updated the OpenSSL library.
log policy POST /v3/{project_id}/instances/{instance_id}/auditlog-policy dds:instance:modifyAuditLogSwitch √ √ Querying the audit log policy GET /v3/{project_id}/instances/{instance_id}/auditlog-policy dds:instance:list √ √ Querying the audit log list GET /v3/{project_id}/instances
(Optional) Audit logs You will be billed for the storage space for database audit logs.
Constraints N/A Range N/A Default Value N/A Example Requests Enabling audit log reporting to LTS for a DB instance POST https://{endpoint}/v3/619d3e78f61b4be68bc5aa0b59edcf7b/instances/logs/lts-configs { "lts_configs" : [ { "instance_id" : "520c58ba00a3497e97ce0b9604874dd6in02
(Optional) Audit logs You will be billed for the storage space for database audit logs.
Logs DDS log management allows you to view database-level error logs, slow query logs, and audit logs, helping you analyze root causes of faults. For more information, see Logs.
log policy. permission_management instance - - dds:instance:getAuditLogPolicy Grants permission to query the audit log policy. list instance - - dds:instance:listAuditLog Grants permission to query audit logs. list instance - - dds:instance:listSlowLog Grants permission to query
log policy - √ √ √ √ √ √ √ √ √ √ √ - Querying audit logs - √ √ √ √ √ √ √ √ √ √ √ - Downloading audit logs - √ √ √ √ √ √ √ √ √ √ √ - Parameters Changing a parameter template - √ √ √ √ √ √ √ √ √ √ √ - Creating a parameter template - √ √ √ √ √ √ √ √ √ √ √ - Deleting a parameter template
In addition, you can view monitoring metrics and audit logs to learn about DDS health status in real time. Database Commands Which Commands are Supported or Restricted by DDS?
