# Alibabacloud Actiontrail Diagnosis

> Read-only query and diagnosis of Alibaba Cloud ActionTrail operation audit events: find out who p…

Read-only query and diagnosis of Alibaba Cloud ActionTrail operation audit events: find out who performed which operation, when, from which source IP, and on which resource, across one or many regions, rendered as a 12-column event table or machine-readable JSON. Use when the user asks about the audit log or operation history of an Alibaba Cloud account; wants to know who changed, created, deleted, or operated on a resource; asks when a resource was operated on; needs to trace read/write operation records, console sign-ins, or API calls of a cloud service; or wants to investigate suspicious or failed operations recorded by ActionTrail. Triggers: audit log, operation history, operation records, who changed, who operated, who deleted, when was it operated, action history, read/write operations, ActionTrail, audit event, operation trace.

- Page: https://ss33.ai/skills/aliyun/alibabacloud-actiontrail-diagnosis-10303920990
- Publisher: aliyun
- Category: [Software Development](https://ss33.ai/skills/category/software-development-t44z8z) › [DevOps & cloud](https://ss33.ai/skills/category/software-development-t44z8z/devops-and-cloud-unkt50)
- Source: https://github.com/aliyun/alibabacloud-aiops-skills/blob/32598d65d9643343f0580393355f1e4803fc5007/skills/others/cseskillshub/alibabacloud-actiontrail-diagnosis/SKILL.md

## Skill

This skill's licence does not allow redistribution, so the store does not serve its text. Get it from the author: https://github.com/aliyun/alibabacloud-aiops-skills/blob/32598d65d9643343f0580393355f1e4803fc5007/skills/others/cseskillshub/alibabacloud-actiontrail-diagnosis/SKILL.md