Creating a Tracker

Scenarios

You can create data trackers to log operations on data. Data trackers record data traces, that is, logs of tenant operations (such as upload and download) on data in OBS buckets.

When you enable CTS, a management tracker is created automatically. Only one management tracker can be created. The trackers you created are all data trackers.

Constraints

• CTS records operations performed in the last seven days. To store traces for a longer period, configure your tracker. The tracker will continuously store traces to your specified LTS log stream or OBS bucket.

Prerequisites

You have enabled CTS.

Creating a Data Tracker

1. Log in to the management console.
2. In the service list, choose > Cloud Trace Service. The CTS console is displayed.
3. Choose Tracker List in the navigation pane. In the upper right corner of the displayed page, click Create Tracker.
4. Set basic information. Enter a tracker name. Click Next.

   A data tracker name contains only letters, digits, hyphens (-), and underscores (_), and must start with a letter or digit. It cannot be empty and contains up to 32 characters. Do not use system or system-trace as a data tracker name.

5. On the Select Trace page, set the parameters and click Next.

   Table 1 Parameters for selecting trace objects

   Parameter	Description
   Data Trace Source	Container for storing data traces. OBS is selected by default.
   OBS Bucket	Select an OBS bucket from the drop-down list. After the tracker is created, the OBS bucket name cannot be changed.
   Operation	Data operations are classified into read and write operations. Read operations refer to obtaining or downloading object data from OBS buckets. Write operations refer to uploading or writing object data to OBS buckets. If you select Read, CTS will record only read operations. If you select Write, CTS will record only write operations.

6. On the transfer configuration page, set related parameters and click Next. You can only query operation records of the last seven days on the CTS console. To store and query operation records beyond seven days, transfer them to OBS or LTS. For details, see Table 2 and Table 3.

   Table 2 Parameters for configuring the transfer to OBS

   Parameter	Description
   Transfer to OBS	If Transfer to OBS is enabled, select an existing OBS bucket and set File Prefix. When Transfer to OBS is disabled, no operation is required.
   OBS Bucket	Existing: Select an existing OBS bucket in the current region.
   Select Bucket	When you select New, enter an OBS bucket name. The OBS bucket name cannot be empty. It can contain 3 to 63 characters, including only lowercase letters, digits, hyphens (-), and periods (.). It cannot contain two consecutive periods (for example, my..bucket). A period (.) and a hyphen (-) cannot be adjacent to each other (for example, my-.bucket and my.-bucket). Do not use an IP address as a bucket name. If you select Existing for OBS Bucket, select an existing OBS bucket.
   Retention Period	The duration for storing traces in the OBS bucket. This configuration will apply to the selected bucket and all files in it. Different compliance standards require different trace retention periods. You are advised to set the retention period to at least 180 days. For a data tracker, you can set the duration to 30 days, 60 days, 90 days, 180 days, 3 years, or the same as that of OBS.
   File Prefix	A file prefix is used to mark transferred trace files. The prefix you set will be automatically added to the beginning of the file names, facilitating file filtering. Enter 0 to 64 characters. Only letters, digits, underscores (_), hyphens (-), and periods (.) are allowed.
   Verify Trace File	When this function is enabled, integrity verification will be performed to check whether trace files in OBS buckets have been tampered with. For details about file integrity verification, see Verifying Trace File Integrity.

   Table 3 Parameters for configuring the transfer to LTS

   Parameter	Description
   Transfer to LTS	When Transfer to LTS is enabled, traces are transferred to the log stream.
   Log Group	When Transfer to LTS is enabled, the default log group name CTS is set. When Transfer to LTS is disabled, no operation is required.

7. Preview the tracker information and click Create.