Auditing

You can use Cloud Trace Service (CTS) to trace operations in CBR.

Prerequisites

CTS has been enabled.

Key Operations Recorded by CTS

**Table 1** CBR operations that can be recorded by CTS
Operation	Resource Type	Trace Name
Creating a policy	policy	createPolicy
Updating a policy	policy	updatePolicy
Deleting a policy	policy	deletePolicy
Setting a vault policy	vault	associatePolicy
Removing a policy from a vault	vault	dissociatePolicy
Creating a vault	vault	createVault
Modifying a vault	vault	updateVault
Deleting a vault	vault	deleteVault
Removing resources	vault	removeResources
Adding resources	vault	addResources
Performing a backup	vault	createVaultBackup
Creating a backup	backup	createBackup
Deleting a backup	backup	deleteBackup
Restoring a backup	backup	restoreBackup

Viewing Audit Logs

For how to view audit logs, see section "Querying Real-Time Traces" in the Cloud Trace Service User Guide.

Disabling or Enabling a Tracker

The following procedure illustrates how to disable an existing tracker on the CTS console. After the tracker is disabled, the system will stop recording operations, but you can still view existing operation records.

Log in to the management console.
In the upper left corner of the page, click and select a region.
Click Service List and choose Management & Deployment > Cloud Trace Service.
Choose Tracker List in the left navigation pane.
In the tracker list, click Disable in the Operation column.
Click Yes.
After the tracker is disabled, the available operation changes from Disable to Enable. To enable the tracker again, click Enable and then click Yes. The system will start recording operations again.