Audit Logs
Using Arvancloud Audit Log, you can notice the changes and actions that have been done in the panel or through the API. This log can be used to fix or debug possible issues and check security activities in the user account.
To access this feature and view the logs through the CDN panel, enter the "Audit Logs" section.
On the logs page, from the filters section, put the service on CDN. In addition, you can also limit the time period and the severity of the logs to the values you need.
Then the list of events and their timeline will be displayed to you and you can get more details by clicking on each one.
Each log has 5 main parameters:
1- ID
Each action performed has a unique ID.
2- Timestamp
This value indicates the exact date and time of the Action or change execution , which is displayed in the format of the ISO 8601 standard.
3- Severity
This field displays the level of importance of the performed activity and includes 6 levels respectively:
- Info
- Debug
- Notice
- Warning
- Error
- Critical
4- Resource
This field indicates the resource on which an action has been performed. In Arvancloud CDN, this value represents the domain and its ID.
5- Payload
This parameter gives you a detailed description of the performed action. Based on the type of each action, this value can contain different information.
The keys used in this field include the following:
Actor Info
This key contains the email of the user who performed the action.
{
"actorInfo": {
"userEmail": "example@example.com”
}
Audit Log Type
The content of this key indicates the type of action performed, which can have two different types:
Type Description userActivity Indicates user activity; Such as: delete or create a DNS record systemEvent Indicates systemic events; Such as: changing the status of the domain operationId
This key represents the type of activity, such as: deleting or creating a DNS record and...
"operationId": "dns_records.store"
In the table below, the different values visible in operationId are written along with the description and level of importance of each:
| operationId | Description | Category | Severity |
|---|---|---|---|
| domains.create | Register a new domain | Domain | INFO |
| domains.transfer.change-status | Confirm or reject the transfer of the domain to the destination user account | Domain | INFO |
| domains.remove | Delete the domain | Domain | INFO |
| domains.clone | Copy settings from another domain | Domain | INFO |
| domains.plan.update | Change in domain plan | Domain | INFO |
| domains.transfer.create | Create a domain transfer request | Domain | INFO |
| general_settings.www-redirect.update | Transfer domain from @ to WWW and vice versa | Domain | INFO |
| ns_keys.set | Create custom NS | Domain | INFO |
| ns_keys.reset | Reset NSs | Domain | INFO |
| cname_setup.convert | Change traffic transfer type to CNAME | Domain | INFO |
| cname_setup.custom.set | Use a custom CNAME record for the domain | Domain | INFO |
| cname_setup.custom.reset | Reset domain CNAME | Domain | INFO |
| dns_records.store | Create a DNS record | DNS Records | INFO |
| dns_records.import | Import Zone File | DNS Records | INFO |
| dns_records.dnssec.actions | Change in domain DNSSEC | DNS Records | INFO |
| dns_records.cloud | Turn on/off the domain cloud icon | DNS Records | INFO |
| dns_records.update | Update a DNS record | DNS Records | INFO |
| dns_records.remove | Delete a DNS record | DNS Records | INFO |
| apps.like | Like/dislike an application of the marketplace | Marketplace | INFO |
| domains.apps.store | Install the application on the domain | Marketplace | INFO |
| domains.apps.delete | Delete the marketplace application | Marketplace | INFO |
| bulk-reports.traffics.total | Get traffic information | Monitoring and Reporting | INFO |
| bulk-reports.visitors.total | Get visitor information | Monitoring and Reporting | INFO |
| acceleration.update | Change acceleration settings | Acceleration | INFO |
| caching.update | Change cache settings | Caching Settings | INFO |
| caching. purge | Purge cache | Caching Settings | INFO |
| custom_pages.update | Change custom pages | Dedicated pages | INFO |
| ddos.settings.update | Change the level of DDoS protection | DDoS Protection | NOTICE |
| ddos.actions.reprioritize | Change the priority of DDoS protection rules | DDoS Protection | NOTICE |
| ddos.rules.create | Create a DDoS protection rule | DDoS Protection | NOTICE |
| ddos.rules.update | Change in a DDoS protection rule | DDoS Protection | INFO |
| ddos.rules.delete | Remove a DDoS protection rule | DDoS Protection | NOTICE |
| firewall.settings.update | Change the default domain rule | Firewall Settings | NOTICE |
| firewall.rules.create | Create a firewall rule | Firewall Settings | NOTICE |
| firewall.rules.update | Update a firewall rule | Firewall Settings | NOTICE |
| firewall.rules.delete | Delete a firewall rule | Firewall Settings | NOTICE |
| firewall.actions.reprioritize | Change the priority of firewall rules | Firewall Settings | NOTICE |
| page_rules.store | Create a page rule | Page Rules | INFO |
| page_rules.change_status | Turn a page rule on/off | Page Rules | INFO |
| page_rules.update | Update a page rule | Page Rules | INFO |
| page_rules.delete | Delete a page rule | Page Rules | INFO |
| page_rules.update_diff | Change in page rule priority | Page Rules | INFO |
| page_rules.purge | Clear cache of a page rule | Page Rules | INFO |
| rate_limit.settings.update | Add an unlimited IP for the entire domain | Rate Limit | NOTICE |
| rate_limit.rules.create | Create a rate limit rule | Rate Limit | NOTICE |
| rate_limit.rules.update | Update a rate limit rule | Rate Limit | NOTICE |
| ssl.update | Update SSL certificate settings | HTTPS Settings | INFO |
| ssl.cert.store | Upload a custom certificate | HTTPS Settings | INFO |
| ssl.cert.delete | Delete a custom certificate | HTTPS Settings | INFO |
| ssl.cert.order.action.retry | Reissue the certificate | HTTPS Settings | INFO |
| load_balancer.store | Create a Load Balancer | Load Balancing | INFO |
| load_balancer.settings.update | Change in advanced Load Balancing settings | Load Balancing | INFO |
| load_balancer.update | Change in Load Balancer | Load Balancing | INFO |
| load_balancer.destroy | Delete a Load Balancer | Load Balancing | INFO |
| load_balancer.pools.store | Create a pool of origin servers | Load Balancing | INFO |
| load_balancer.pools.update | Making changes to a Load Balancing pool | Load Balancing | INFO |
| load_balancer.pools.updatePool | Making changes to a Load Balancing pool | Load Balancing | INFO |
| load_balancer.pools.destroy | Delete a pool of origin servers | Load Balancing | INFO |
| load_balancer.pools.origins.store | Create a new server in the origin server pool | Load Balancing | INFO |
| load_balancer.pools.origins.update | Change a server in the origin server pool | Load Balancing | INFO |
| load_balancer.pools.origins.destroy | Remove a server from the origin server pool | Load Balancing | INFO |
| waf.actions.reprioritize | Change the priority of custom WAF rules | Web Application Firewall (WAF) | NOTICE |
| waf.actions.reprioritize-package | Change the priority of running WAF packages | Web Application Firewall (WAF) | NOTICE |
| waf.rules.create | Create a rule in WAF | Web Application Firewall (WAF) | NOTICE |
| waf.rules.update | Update a WAF rule | Web Application Firewall (WAF) | NOTICE |
| waf.rules.delete | Delete a WAF rule | Web Application Firewall (WAF) | NOTICE |
| waf.packages.create | Select a security package in the WAF | Web Application Firewall (WAF) | NOTICE |
| waf.packages.update | Changing the settings of a security package in WAF | Web Application Firewall (WAF) | NOTICE |
| waf.packages.delete | Remove a security package in WAF | Web Application Firewall (WAF) | NOTICE |
| health_check.store | Create a Load Balancing monitoring | Server Health Check | INFO |
| health_check.update | Update a Load Balancing monitoring | Server Health Check | INFO |
| health_check.destroy | Remove a Load Balancing monitoring | Server Health Check | INFO |
| transport_layer_proxies.store | Create a layer 4 proxy application | Layer 4 Proxy | INFO |
| transport_layer_proxies.update | Update a layer 4 proxy application | Layer 4 Proxy | INFO |
| transport_layer_proxies.destroy | Remove a layer 4 proxy application | Layer 4 Proxy | INFO |
| dynamic_fields.store | Create a list | Lists | INFO |
| dynamic_fields.update | Update a list | Lists | INFO |
| dynamic_fields.remove | Delete a list | Lists | INFO |
| image_resize.update | Turn image resize off/on | Image Resize | INFO |
| log_forwarders.store | Create a log forwarder | Log Forwarding | INFO |
| log_forwarders.update | Change details of a log forwarder | Log Forwarding | INFO |
| log_forwarders.update.status | Turn off/on a log forwarder | Log Forwarding | INFO |
| log_forwarders.destroy | Delete a log forwarder | Log Forwarding | INFO |
| troubleshoot.store | Perform troubleshooting | Troubleshooting | INFO |
operationTargetResource
This key indicates the resource on which an action has been performed. In Arvancloud CDN, the value of this key is the user's domain.
"operationTargetResource": "/4.0/domains/example.com"