Management Console Audit Logs

Enabling CTS

A tracker will be automatically created after CTS is enabled. All traces recorded by CTS are associated with a tracker. Currently, only one tracker can be created for each account.

1. Log in to the management console, choose Service List > Management & Governance > Cloud Trace Service. The CTS management console is displayed.
2. In the navigation tree on the left, click Trackers.
3. Enable CTS.

   If you are a first-time CTS user and do not have any created tackers in the tracker list, enable CTS first. For details, see Enabling CTS in the Cloud Trace Service Getting Started.

   If you have enabled CTS, the system has automatically created a management tracker. Only one management tracker can be created and it cannot be deleted. You can also manually create a data tracker. For details, see Managing Trackers > Creating a Tracker in the Cloud Trace Service User Guide.

Disabling the Audit Log Function

If you want to disable the audit log function, disable the tracker in CTS.

1. Log in to the management console, choose Service List > Management & Governance > Cloud Trace Service. The CTS management console is displayed.
2. Disable the audit log function by disabling the tracker. To enable the audit log function again, you only need to enable the tracker.

   For details about how to enable or disable a tracker, see Disabling or Enabling a Tracker in the Cloud Trace Service User Guide.

Key Operations

With CTS, you can record operations associated with GaussDB(DWS) for later query, audit, and backtrack operations.

The creation and deletion of automatic snapshots are not performed by users, therefore not recorded in audit logs.

Viewing Traces

1. Log in to the management console, choose Service List > Management & Governance > Cloud Trace Service. The CTS management console is displayed.
2. In the navigation pane on the left, choose Trace List.
3. Click the search box above the trace list and set the search criteria.

   The following filters are available:

   • Trace Name: If you select this option, you also need to select a specific trace name.
   • Cloud Service: Select GaussDB(DWS).
   • Resource Type: Select All resource types or specify a resource type.
   • Resource Name: If you select this option, you also need to select or enter a specific resource name.
   • Resource ID: If you select this option, you also need to select or enter a specific resource ID.
   • Operator: Select a specific operator (at user level rather than tenant level).
   • Event ID: If you select this option, you also need to select or enter an event ID.
   • Trace Status: Available options include All trace statuses, normal, warning, and incident. You can only select one of them.
   • Enterprise Project ID: If you select this option, you also need to select or enter a specific enterprise project ID.
   • Access Key ID: If you select this option, you also need to select or enter a specific access key ID.
     Figure 1 Querying traces
     

4. Click Query.
5. Click the name of the trace to be viewed. A window is displayed, showing the trace details.

   For details about key fields of a CTS trace, see "Trace References" > "Trace Structure" and "Trace References" > "Example Traces" in the Cloud Trace Service User Guide.