Transferring CTS Traces to LTS and Viewing Them

Video Tutorial

Constraints

• Global services can transfer traces to LTS only if you configure a tracker on the CTS console in the central region (CN-Hong Kong). If you configure a tracker on the CTS console in other regions, this function does not take effect. For details about Huawei Cloud global services, see Constraints.
• If you have not configured transfer, the CTS console retains operation logs for seven days. After this period, the logs are automatically deleted and cannot be viewed, even if you configure transfer later.

Preparations

1. Register with Huawei Cloud and complete real-name authentication.

   If you already have a Huawei Cloud account, skip this step. If you do not have one, do as follows:

   1. Log in to the Huawei Cloud official website, and click Sign Up in the upper right corner.
   2. Complete the registration as prompted. For details, see Registering with Huawei Cloud.

      Your personal information page is displayed after the registration completes.

   3. Complete individual or enterprise real-name authentication by referring to Real-Name Authentication.
2. Top up your account.

   Transferring logs to LTS will incur fees. Ensure that your account balance is sufficient.

   • For details about LTS pricing, see Log Tank Service Pricing Details.
   • For details about how to top up an account, see Topping Up an Account.
3. Grant permissions for users.

   If you log in to the console using a Huawei Cloud account, skip this step.

   If you log in to the console as an IAM user, first contact your CTS administrator (account owner or a user in the admin user group) to obtain the CTS FullAccess permissions. For details, see Assigning Permissions to an IAM User.

4. Configure CTS log ingestion on the LTS console.
   If you transfer CTS logs to LTS for the first time, perform the following steps to configure CTS log ingestion:

   1. Log in to the LTS console.
   2. Choose Log Ingestion > Ingestion Center in the navigation pane and click CTS (Cloud Trace Service).
   3. On the displayed page, retain the default values for Log Group and Log Stream, and click Next: Configure CTS > Next: Configure Log Stream > Submit.

Configuring Trace Transfer to LTS

1. Log in to the CTS console.
2. Select a region closest to your application to reduce latency and accelerate access.

   In this practice, select CN-Hong Kong.

3. In the navigation pane, choose Tracker List.
4. Click Configure in the Operation column of the system tracker.
   Figure 1 Configuring the system tracker
   

5. On the Basic Information page, set parameters as follows and click Next.
   Figure 2 Setting basic information
   

   Table 1 Setting basic information

   Parameter	Description	Example in This Practice
   Tracker Name	The name of a management tracker is system by default and cannot be changed.	system
   Enterprise Project	Enterprise projects allow you to manage cloud resources and users by project. For details about how to enable them, see Creating an Enterprise Project. If you have not enabled the enterprise project management service, skip this parameter. If you have enabled the service, select default in this practice.	default
   Apply to Organization	CTS supports the multi-account management capability of Organizations. After you enable Apply to Organization, the following functions are available. For details, see Organization Trackers. Use an organization administrator account to set CTS as a trusted service on the Organizations console and specify a delegated administrator account. You can use the delegated administrator account to configure an organization tracker in CTS. Then the delegated administrator account can implement cloud audit capabilities, such as security audit.	Disable
   Operation	If you select Exclude DEW traces, the tracker will not transfer the data about operations on Data Encryption Workshop (DEW). For details about DEW audit operations, see Operations supported by CTS.	Deselect Exclude DEW traces

6. On the Configure Transfer page, set parameters as follows and click Next > Configure. After the tracker is configured, the system starts recording operations based on the new rule.
   Figure 3 Configuring transfer parameters
   

   Table 2 Setting basic information

   Parameter	Description	Example in This Practice
   Transfer to LTS	CTS records details of tenant operations, such as creating, modifying, and deleting cloud service resources, and stores these records as traces in the trace list for seven days. To store traces for more than seven days, configure trace transfer to LTS. This allows CTS to periodically transfer trace files to LTS log streams for long-term storage. After Transfer to LTS is enabled, audit logs will be periodically transferred to LTS log streams.	Enable
   Log Group	The log group name defaults to CTS and cannot be changed. Traces will be transferred to log stream CTS/system-trace.	CTS

Viewing Historical Traces in an LTS Log Stream

After you configure the system tracker to transfer traces to an LTS log stream, the system will record operations based on the new rule and transfer trace files to the log stream. Then, you can view the trace files in the log stream.

1. On the Tracker List page, the log stream CTS/system-trace that you set when configuring the transfer is displayed in the Storage column of the system tracker. Click the stream name to go to the stream details page on the LTS console.
   Figure 4 Clicking the log stream name
   

2. On the page displayed, view historical logs.

   For details about key fields in a trace, see Trace Structure and Example Traces.

   Figure 5 system-trace log stream page
   

3. Click to download the log file to your local PC.