Updated on 2024-10-18 GMT+08:00

Audit and Logging

Operation Logs on the Management Console

Cloud Trace Service (CTS) records GaussDB(DWS) operation logs on the management console, such as creating or deleting GaussDB(DWS) clusters. CTS is a log audit service intended for cloud security. It records operations on the cloud resources in your account. You can use the logs generated by CTS to perform security analysis, track resource changes, audit compliance, and locate faults.

After you enable CTS and configure a tracker, CTS can record management and data traces of GaussDB(DWS) for auditing.

For more information, see Management Console Audit Logs.

Database Audit Logs

In GaussDB(DWS), database logs include O&M logs (CN, DN, and OS logs) and DDL/DML database audit logs, which are audited by Log Tank Service (LTS). LTS collects log data from servers and cloud services. By processing massive amounts of logs efficiently, securely, and in real time, LTS provides useful insights for you to optimize the availability and performance of cloud services and applications. It also helps you efficiently perform real-time decision-making, device O&M management, and service trend analysis.

You can enable LTS to view the CN, DN, OS message, and DML/DDL audit logs of GaussDB(DWS).

In addition, database audit logs can be dumped to OBS to ensure the log retention period. For details, see Database Audit Logs.