Diagnostic logs
Trail diagnostic logs contain records of changes to the status of the trail itself.
Diagnostic logs have nothing to do with events occurring to the resources the trail collects audit logs for.
The trail statuses are as follows:
active: Trail is running and collecting audit logs from the available resources.error: Possible issues with the trail's destination objects or the trail itself. See our recommendations on how to recover the trail.
Note
The retention period of audit logs in a trail with the error status is limited. There is no guarantee that logs that are older than 28 days will be delivered once the trail returns to the active status.