Viewing Audit Logs

DataArts Security provides detailed data operation logs for GaussDB(DWS), DLI, and Hive data sources. The logs contain the time, users, objects, and types of operations. Based on these logs, you can quickly audit data operations and better manage data security.

Prerequisites

To audit access to GaussDB(DWS) data sources, ensure that the following conditions are met:

The audit function has been enabled for GaussDB(DWS) clusters.
The audit function is enabled by default. If it is disabled, set audit_enabled to ON by following the instructions in Modifying Database Parameters.
The items to be audited have been configured.
For details about GaussDB(DWS) audit items and how to enable them, see Configuring the Database Audit Logs.

Constraints

For the GaussDB(DWS) data source, if separation of duties is disabled, users with the SYSADMIN attribute can view audit records by default. If separation of duties is enabled, only users with the AUDITADMIN attribute can view audit records. Therefore, ensure that the account in the data connection or the current user has the preceding permissions. (Before enabling the permission application, use the account in the data connection to view audit records. If the permission application is enabled, use the current IAM user to view audit records.)

The MRS audit data depends on the CDM agent. Ensure that the CDM agent version suits Huawei Cloud Stack 8.3.1.

Procedure

On the DataArts Studio console, locate an instance and click Access. On the displayed page, locate a workspace and click DataArts Security.

Figure 1 DataArts Security
In the left navigation pane, choose Data Access Audit.

Figure 2 Data Access Audit
You can switch between tabs to view the audit logs of different data sources. By default, logs generated in the last one hour are displayed. You can customize the time range, which can be up to one month.
- DWS audit log: The log list uses the latest DWS data connection by default. Click Log Details to view information about a log.
  Click Export to export DWS audit logs on the current page in JSON format.
  Figure 3 DWS audit logs
- MRS Hive audit logs: By default, the MRS Hive log list does not display log content. You can search for logs based on conditions. The search results are displayed by tab page. A maximum of five tab pages of search results can be displayed.
  Figure 4 MRS Hive audit logs
- DLI audit logs: By default, the DLI log list displays log information. Click Log Details to view information about a log.
  Figure 5 DLI audit logs