Audit Logs Shipping
Last updated:2025-12-31 15:03:32
Audit Logs Shipping
Last updated: 2025-12-31 15:03:32
The Database Audit of TencentDB for PostgreSQL provides the log shipping feature. Through log shipping, you can collect Database Audit logs from TencentDB for PostgreSQL instances and ship them to CLS (Cloud Log Service) for centralized management and analysis. This article describes how to enable or disable the log delivery feature of Database Audit via the console.
Prerequisites
Before using this feature, please ensure that you have enabled CLS.
The instance status is Running.
Log Shipping Billing
TencentDB for PostgreSQL's Database Audit feature for delivering audit logs to CLS involves the third-party independently billed cloud product CLS. For billing specifications, see CLS > Billing Overview.
After the log shipping feature is enabled for TencentDB for PostgreSQL's Database Audit, traffic fees will be incurred. The fees are charged based on the traffic of shipped logs. For details, see the table below.
Billable Item: Audit Log Traffic | |
China (USD/GB) | Other Countries and Regions (USD/GB) |
0.059 | 0.088 |
Enabling Log Shipping
1. Log in to the TencentDB for PostgreSQL console.
2. In the left sidebar, select Database Audit.
3. After selecting a region at the top, go to the Audit Instances page. Click Audit Status and select the Enabled option to filter out instances with audit enabled.
4. Find the target instance in the audit instance list (or search for the instance by resource attributes in the search box), and choose More > Configure Log Shipping in the Operation column.
5. (Skip this step if CLS has already been activated.) Click go to activate in the pop-up sidebar to activate CLS.
6. (Skip this step if CLS has already been activated.) Return to the console after activation and click Activation Completed in the pop-up window for activation confirmation.
Note:
During the activation process, the system will verify whether activation is successful. If the system prompts that activation has failed, wait for a while and try again.
7. (Skip this step if COS has already been authorized.) In the sidebar, click Go to Authorization. Then, in the Service Authorization pop-up window, click Authorize.
Note:
During the authorization process, the system will verify whether the service role authorization is successful. If the system prompts that the authorization fails, you can try authorization again later.
8. In the sidebar, click Enable Now.
9. Complete the following configurations in the pop-up window and click Start Now.
Parameter | Description |
Target Region | Select the region for log delivery. If CLS supports the region where the database instance resides, the instance region is selected by default. You can also select other available regions. If CLS does not support the region where the database instance resides, you can select other regions supported by CLS. |
Log Topic Operation | It supports selecting an existing topic or creating one. |
Select an existing topic | If the log topic is set to select an existing topic, you need to further select the existing logsets and log topics. Logset: Logsets classify log topics to facilitate log topic management. You can filter existing logsets in the search box. Log topic: A log topic is the basic unit for collecting, storing, retrieving, and analyzing log data. You can filter log topics of the selected logset in the search box. |
Creates log topics. | If the log topic is set to create a log topic, you need to further customize the log topic and then assign it to an existing logset or a created logset. Log topic: A log topic is the basic unit for collecting, storing, retrieving, and analyzing log data. You need to create a log topic. Select the existing logset: The log topic to be created will be added to an existing logset. If you select this option, you can filter existing logsets in the search box. Create logset: The log topic to be created will be added to a newly created logset. If you select this option, you need to create a logset. |
View Log Shipping
After the log shipping feature for Database Audit is enabled, you can view the shipping status of database audit logs for relevant instances.
1. Log in to the TencentDB for PostgreSQL console.
2. In the left sidebar, select Database Audit.
3. Select a region at the top. On the Audit Instance page, find the target instance (or search for the instance by resource attributes in the search box), and choose More > Configure Log Shipping in the Operation column.
4. In the pop-up sidebar, view the current log shipping information.
Click the logset name, log topic name, or search and analysis to jump to the CLS console to view the log shipping status.
Disable Log Shipping
Note:
After disabling log shipping, the shipping of the current instance's Database Audit logs will be stopped. Note that after disabling, only the shipping of newly generated database audit logs will be stopped, and logs shipped to CLS will continue to be stored in the log topic until expiration. During this period, storage fees will be generated continuously. If you want to delete one or more log topics, please go to Log Topic Management.
1. Log in to the TencentDB for PostgreSQL console.
2. In the left sidebar, select Database Audit.
3. Select a region at the top. On the Audit Instance page, find the target instance (or search for the instance by resource attributes in the search box), and choose More > Configure Log Shipping in the Operation column.
4. In the pop-up sidebar, click Disable Shipping.
5. In the pop-up window, read the notes and click OK.
References
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No
Feedback