View events

KakaoCloud Cloud Trail records user actions performed through the console or OpenAPI as events. You can find events by viewing the event list, reviewing event details, or using search.

note

For detailed event lists by service, including events generated through the service console and OpenAPI calls, see Events by service.

View event list

You can view project events from the last 90 days. In the upper-right corner of the list, you can check whether log storage is enabled and open [Log storage settings]. For details, see Configure log storage.

1. Go to KakaoCloud console > Management > Cloud Trail menu.

2. Select Events menu.

   Item	Description
   Name	Name of an event associated with user activity, such as resource creation or deletion
   Date and time	Date and time when the event occurred
   Type	Whether the event is an organization event or project event
   Cloud account	Account that performed the activity - Identifies the actor, such as the creator of a resource or the user who changed its specifications
   User ID	Unique ID of the user who performed the activity - Displays - for events automatically generated by the system, such as scheduled backups
   Service	Path or target service where the event occurred - Console: Event generated by an action performed in the console UI - Service name: Event generated by the service, including resource changes made in the console and direct service API calls - OpenAPI: Event generated by an OpenAPI call
   Resource type	Service resource type where event occurred
   Resource name	Service resource name where event occurred - Omitted if service and resource name do not exist - Displayed as organization name when resource type is Domain - Displayed as project name when resource type is Project

   note

   Click Settings above the list to select the columns to display.

View event details

You can view detailed information about an event.

1. Go to KakaoCloud console > Management > Cloud Trail menu.

2. Click Events menu, then select event name to check detailed information.

3. Check detailed information for corresponding event.

   Item	Description
   Name	Name of an event associated with user activity, such as resource creation or deletion
   ID	Unique event ID
   Date and time	Date and time when the event occurred
   Type	Whether the event is an organization event or project event
   User name	User name excluding domain from user email
   Cloud account	Account that performed the activity - Identifies the actor, such as the creator of a resource or the user who changed its specifications
   User ID	Unique ID of the user who performed the activity
   Source IP	User IP
   Service	Path or target service where the event occurred - Console: Event generated by an action performed in the console UI - Service name: Event generated by the service, including resource changes made in the console and direct service API calls - OpenAPI: Event generated by an OpenAPI call
   Resource type	Service resource type where event occurred - Omitted if no detailed type exists within service
   Resource name	Service resource name where event occurred - Omitted if service and resource name do not exist - Displayed as organization name when resource type is Domain - Displayed as project name when resource type is Project
   Resource ID	ID for service resource - Also omitted if resource name does not exist
   Event log	Event log in JSON format
   Additional event detail log	Additional event detail log in JSON format

Search events

Users with permission to view organization events—users who have a project role and either the Organization Admin or Trail Viewer role—can filter organization and project events separately. Click Search filters to display an area where you can configure search terms by filter attribute, event type, and period.

Search events with filters

You can search for events by selecting a filter attribute and entering a value. For event names generated by a specific service, see Events by service.

1. Go to KakaoCloud console > Management > Cloud Trail menu.

2. Click Events, and then click Search filters.

3. Select an attribute from the filter attribute dropdown and enter a value. You can add multiple search chips.

   • Example: Select Name and enter delete. A Name: delete chip is created, and the list refreshes to show events whose names contain delete.
   • To return only exact matches, enclose the value in double quotation marks (").

   Filter	Description
   Name	Search by event name
   Cloud account	Search by the account that performed the activity
   User ID	Search by the ID of the user who performed the activity
   Service	Search by the service where the event occurred
   Resource type	Search by service resource type for event to check
   Resource name	Search by service resource name for event to check
   IAM access key ID	Search by the ID of the IAM access key (application credential) used for an OpenAPI call - Recorded in other_additional_info.application_credential.id in the additional event detail log; use this filter to find operations performed with a specific access key
   IAM access key name	Search by the name of the IAM access key (application credential) used for an OpenAPI call - Recorded in other_additional_info.application_credential.name in the additional event detail log; use this filter to find operations performed with a specific access key

Use item filter

Filter the list to show only organization events, project events, or both.

1. Go to KakaoCloud console > Management > Cloud Trail menu.

2. Click Events, and then select the desired values from the Type dropdown in the search filter area. You can select both Organization and Project.

   Item	Description
   No selection	View all events without distinguishing between Organization and Project
   Organization	View only organization events - Only users who have a project role and either the Organization Admin or Trail Viewer role can view organization events
   Project	View only project events

Use period filter

Set a period to search for events that occurred during a specific time range.

1. Go to KakaoCloud console > Management > Cloud Trail menu.

2. Click Events, and then configure the period in the search filter area.

   Item	Description
   1 hour	View events that occurred within the last hour
   1 day	View events that occurred within the last 24 hours
   Custom	Set the start and end date and time, to the minute, for a period of up to 90 days

3. If you select Custom, use the calendar to set the date, hour, and minute for the start and end date and time.

   • Click Reset to restore the default period.