Audit operations

OceanBase Admin Toolkit (OAT) provides the operation audit feature to meet the security and compliance requirements. This feature records the O&M operations performed in the OAT console in real time and allows you to query the operation records.

To use this feature, perform the following operations: Log in to the OAT console. In the left-side navigation pane, choose Systems and Security > Operation Audit. On the Operation Audit page, view records on different pages and filter records by time. By default, the Operation Audit page displays records of the previous 24 hours. You can query records of the previous 24 hours, previous 7 days, previous 30 days, or a custom time range. You can also search for records by resource name. The Operation Audit page displays the following information:

• Resource type: the type of the resource on which an operation is performed. You can filter records by resource type. By default, records are retained for one year.

• Resource operation

  Resource type	Operation
  Component	Create a component
  	Uninstall a component
  	Take over a component
  	Modify a component
  Service	Create a service
  	Uninstall a service
  	Take over a service
  	Modify a service
  	Upgrade a service
  Tool	Create a tool
  	Configure a tool
  	Uninstall a tool
  Server	Add a server
  	Edit a server
  	Delete a server
  Credential	Create a credential
  	Modify a credential
  	Delete a credential
  Package	Scan a package
  	Delete a package

• Resource name:

  • The name of the resource on which an operation is performed, such as the IP address of a server, a service name, or a component name.
  • If an operation is performed on resources of different types, such as OceanBase Cloud Platform (OCP), OceanBase Developer Center (ODC), and OceanBase Migration Service (OMS), each resource name is displayed in the type/name format. Example: OCP/MyOCP.

• Operation information: a JSON string that contains the operation request.

• Operator: the name of the user that initiates an operation. You can filter records by operator.

• Source IP address: the IP address of the client that initiates an operation.

• Execution time: the start time of an operation. You can sort records by execution time. By default, records are sorted by execution time in descending order.

• Execution result: the execution result of an operation, including Successful and Failed.