Docs

File Storage vePFS

Audit log

Create audit policy

This article explains how to create an audit policy in the vePFS Console.

Notice

The audit log feature is in beta testing. Contact your account manager to use this feature.

Prerequisites

You have created a file system. For details, see Creating file systems.

The target file system is not being expanded. For more information, see Expanding file systems.

Log Service has been enabled.

File storage vePFS is authorized to access Log Service. For details, see Cross-service authorization.

Steps

In the top menu bar, select the region of the file system you want to manage.

In the left navigation pane, click File System > File System List.

On the File System page, click the file system you want to manage.

On the file system details page, select the Audit Logs tab and click Create Audit Policy.

On the Create Audit Policy page, configure the following information.

In the Basic Information section, enter the Audit Policy Name. Naming rules are as follows:

Start with English letters or Chinese characters.

The permission group name can only contain Chinese characters, letters, numbers, periods (.), underscores (_), or hyphens (-).

Length must be between 1 and 128 characters.

In the Log Delivery Configuration section, configure the following information.

Parameter	Note
Log project	Select or create a log project to deliver audit logs. Select an existing log project from the dropdown to deliver audit logs. Click Create Log Project to create a new log project for audit log delivery. For details, see Log Project.
Log topic	Select or create a log topic for delivering audit logs. Select an existing log topic from the dropdown to deliver audit logs. Click Create log topic to create a new log topic for audit log delivery. For detailed steps, see Log topic. tip To ensure successful audit log delivery, configure log data collection and indexing in Log Service. For more information, refer to Log Service Overview.

In the Audit Strategy Configuration section, configure the following information.

Parameter	Note
Audit directory	Select the file system directory that needs the audit log feature enabled You can choose the file system root directory or Fileset. When selecting the file system root directory, audit log will be enabled for the entire file system. When selecting Fileset, audit log will only be enabled for files under the specified Fileset. Multiple selections supported.
Audit actions	Select the operation type to audit. The supported operation types are as follows: High-risk actions RENAME (modify file or directory name) RMDIR (delete directory) UNLINK (delete file, or remove/delete a link) Moderate-risk actions OPEN (Open file or directory) CREATE (Create file or directory) CLOSE (Close file) ACCESS_DENIED (No access permission) ACLCHANGE (Modify ACL) XATTRCHANGE (Modify extended attributes) For additional information about actions, see Audit Actions Description.
Start Now	Click the start switch. The audit policy will start immediately after it is created.

Click Confirm. If the strategy status is Stopped, it means the audit strategy was created successfully.

tip

If you enable the Start immediately toggle during creation, the strategy status being Running means the audit strategy was created successfully and is now active.

Related operations

View audit strategy

After creating the audit strategy, you can view the following information on the Audit Log tab.

Parameter	Note
Audit policy name/ID	The specific name and ID of the audit policy.
State	The status of the audit policy includes the following three types: Running Stopped Abnormal
Audit Directory	Directory enabled for audit features.
Audit operation types	Type of actions for auditing.
Log project name/ID	Log project name and ID used to deliver audit logs. Click the log project name to open its detail page. For more information, see Log Project.
Log topic name/ID	Log topic name and ID for delivering audit logs. Click the log topic name to view detailed audit log information on the log topic details page For more information, see Query Audit Logs.
Operation	You can edit, stop, start, and delete your created audit policies. For more details, see Follow-up actions.

Next steps

After creating the audit strategy, you can perform the following actions in the Actions column on the Audit Log tab.

Operation	Note
Edit	You can modify audit policies in any state. Changes take effect immediately. The following audit policy elements can be modified: Audit policy name. Log project. Log topic. Audit directory. You can switch between the root directory and Fileset, and add or remove Fileset. Audit actions. You can add or remove all types of actions.
Stop	You can stop audit policies that are Running. Once stopped, the running audit policy will be interrupted. Steps: Click Stop. In the dialog that appears, click Stop. When the audit policy status changes to Stopped, the operation is successful.
Start	You can start an audit policy with the status Stopped. After setting to start, the audit log feature will be enabled based on the current audit policy. The specific steps are as follows: Click Start. In the dialog box that appears, click Start. When the audit policy status changes to Running, the start operation was successful.
Delete	You can delete audit policies in any state. Deleting a policy in Running status will interrupt it.

Last updated: 2026.03.03 10:21:04