Updated on 2024-09-30 GMT+08:00

Querying System Logs

System logs include system login logs and system operation logs. System login logs record all login activities. System operation logs record all operations performed on the bastion host console after login, including but not limited to adding, deleting, and modifying resource accounts or system users, as well as logins.

For example, after a system user logs in to a bastion host and performs operations such as permission configuration and audit management, you, the audit administrator, will receive system log records. You can query login and operation log details to audit system logs online.

Prerequisites

You have the management permissions for the System Logon or System Operation module under System Log.

Querying System Logon Logs

  1. Log in to your bastion host.
  2. Choose Audit > System Log > System Logon to switch to the system log page.

    In system operation logs, O&M task results record whether O&M tasks are complete. System logs do not include the execution results of specific commands or scripts in an O&M task.

    Figure 1 System logon logs

  3. Query login logs.

    • Quick search

      Enter a keyword in the search box to quickly query system logon logs by user, source IP address, start time, end time, and log content.

    • Advanced search

      Enter keywords in the corresponding attribute search boxes to search for system login logs in exact mode.

  4. View the login logs in the search result.

Viewing System Operation Logs

  1. Log in to your bastion host.
  2. Choose Audit > System Log to go to the system log page.
  3. Click the System Operation tab.

    Figure 2 System operation logs

  4. Query operation logs.

    • Quick search

      Enter a keyword in the search box to quickly query operation logs by user, source IP address, start time, end time, and log content.

    • Advanced search

      Enter keywords in the corresponding attribute search boxes to search for operation logs in exact mode.

  5. View the operation logs in the search result.