Updated on 2025-05-29 GMT+08:00

Viewing Audit Logs

After you enable CTS, it starts recording operations on ESM. CTS stores operation records for the last seven days.

This section describes how to view the operation records on the CTS console.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner and choose Management & Governance > Cloud Trace Service.
  3. In the navigation pane, choose Trace List.
  4. On the Trace List page, use advanced search to query traces. You can combine one or more filters:

    • Trace Name: Enter a trace name.
    • Trace ID: Enter a trace ID.
    • Resource Name: Enter a resource name. If the cloud resource involved in the trace does not have a resource name or the corresponding API operation does not involve the resource name parameter, leave this field empty.
    • Resource ID: Enter a resource ID. Leave this field empty if the resource has no resource ID or if resource creation failed.
    • Trace Source: Select a cloud service from the drop-down list.
    • Resource Type: Select a resource type from the drop-down list.
    • Operator: Select one or more operators from the drop-down list.
    • Trace Status: Select normal, warning, or incident.
      • normal: The operation succeeded.
      • warning: The operation failed.
      • incident: The operation caused a fault that is more serious than the operation failure, for example, causing other faults.
    • Time range: Select Last 1 hour, Last 1 day, or Last 1 week, or specify a custom time range within the past week.

  5. On the Trace List page, export and refresh the trace list, and customize the list display settings.

    For more information about CTS, see the Cloud Trace Service User Guide.