Help Center/ Workspace/ User Guide (Administrators)/ Security Audit/ User Operation Records/ Interconnecting with LTS and Viewing User Operation Logs/ Desktop Log Stream Overview
Updated on 2026-02-24 GMT+08:00
View PDF
Share

Desktop Log Stream Overview

Desktop Log Stream

Workspace allows you to view user operation records. When interconnected with LTS, you can quickly search for, collect statistics on, and analyze user operation logs.

  • Workspace's log stream function is free of charge, but you may be charged for other cloud service resources used.
  • By default, a tenant can create up to 100 log groups in a project, and a log group can contain up to 100 log streams.
  • Logs are stored in LTS servers. Billing starts once the interconnection with LTS is successful. For details, see LTS Pricing Details.

Log data

After creating a log, you can view the operation records of a desktop through the log stream. Events (including desktop startup, shutdown, restart, hibernation, connection, and disconnection; application startup and termination) are logged to generate log stream data. The log stream data includes the project ID, username, and event type. For details, see Table 1.

Table 1 Log stream fields

Field

Description

Example Value

projectId

Project ID

0ea1d70db800f39f2f65c01e1394dxxx

username

Username

user01

workspaceId

Enterprise ID

FaultAD

eventType

Event type

loginByCustomAuthSystem

eventTime

Event time

2025-03-20T10:00:08Z

resourceType

Resource type

USER

resourceId

Resource ID

1b7edbd71aa646bcbba8d4f4ba38c251

resourceName

Resource name

user01

clientType

Client type

Windows

clientIp

Client IP address

7.22.23.xx

clientMac

Client MAC address

fa-xx-3e-xx-93-29

clientVersion

Client version

25.x.x.x

sourceIp

Source IP address

100.68.66.xx

isSuccess

Whether the request is successful

true

apiUrl

Request path

/v2/access/auth/by-ticket

actionType

Behavior type

USER

errorCode

Error code

WKS.00030100

errorMsg

Error message

The username or password is incorrect xxxxxx
Parent Topic: Interconnecting with LTS and Viewing User Operation Logs