Updated on 2025-10-30 GMT+08:00

Functions

This section describes the main functions of CTS. You can check if a certain function is available in a region on the console.

Tracker

Before using CTS, you need to enable the service. A management tracker is automatically created upon initial enablement. This tracker identifies and associates with all cloud services you are using, and records all operations on the services.

Trace

Traces are cloud resource operation logs captured and archived by CTS. You can view traces to identify when operations were performed by which users.

There are two types of traces: Management traces are operation records reported by cloud services, whereas data traces specifically capture read/write operation records reported by OBS.

Trace File

A trace file is a collection of traces. CTS generates trace files based on services and transfer cycle and sends these files to your specified OBS buckets in real time. Typically, all traces of a service generated in a transfer cycle are compressed into one trace file. However, CTS dynamically adjusts the number of traces per file when dealing with a high volume of traces.

CTS supports trace file encryption. When this feature is enabled, CTS uses keys provided by DEW to encrypt the trace files during transfer.

Trace File Integrity Verification

During a security audit, operation records will not be able to serve as effective and authentic evidence if they have been deleted or otherwise tampered with. You can enable integrity verification in CTS to ensure the authenticity of trace files.

Advanced Query

Advanced query offers enhanced trace search capabilities. It supports additional search criteria, LTS query syntax, and professional log interpretation, helping you easily locate and analyze system issues.

Key Event Notification

CTS enables you to configure key event notifications. Upon a specific event trigger, SMN sends notifications to subscribers via diverse channels, such as mobile phones, email, or HTTP/HTTPS endpoints.