#1107 - OIC Control Plane Audit Logs

Introduction 

By control plane, I am referring to the OCI Console, where you can list, create, delete, stop etc. OIC instances. Here is a simple example - I begin by just listing the OIC instances in my compartment. 

I now navigate to Observability - Logging - Audit - 

Here I immediately see that the list OIC instances has been audited. 

There are many filters available here, so let's look at them.

I can filter by user - 

I can filter on OCI Resource and Action Types - 

and finally Event type -

I now stop one of my OIC instances, NiallCDemo. So who was fool enough to stop this mission critical instance?

Back in the Audit page, I see a new entry in the Event type filter list -

 And there's our culprit! 

Summa Summarum

Brevis et suavis!