Audit and Logging

Audit

Cloud Trace Service (CTS) is a log audit service intended for Huawei Cloud security. It allows you to collect, store, and query cloud resource operation records. You can use these records to track resource changes, analyze security compliance, and locate faults.

For details about how to enable and configure CTS, see CTS Getting Started.

Figure 1 How CTS works

Logging

Kubernetes logs allow you to locate and rectify faults. This section describes how you can manage Kubernetes logs generated for UCS in the following ways:

• Use the Cloud Native Logging add-on to collect application logs and report them to LTS, which provides log statistics and analysis. For details, see Collecting Data Plane Logs.
• Collect control plane component logs and Kubernetes audit logs from master nodes and add them to the LTS log streams in your account. For details, see Collecting Kubernetes Audit Logs.
• Collect Kubernetes events and add them to the LTS log stream in your account for persistent storage and statistical analysis. For details, see Collecting Kubernetes Events.

For the introduction and configuration of UCS logging, see Logging.