Audit Logs

Updated on 2024-04-29 GMT+08:00

View PDF

Scenarios

After you enable CTS and the management tracker is created, CTS starts recording operations on cloud resources. After a data tracker is created, the system starts to record user operations on data in OBS buckets. CTS retains operation records of the latest seven days.

This section describes how to query and export operation records of the last seven days on the CTS console.

Viewing Real-Time Traces in the Trace List of the New Edition
Viewing Real-Time Traces in the Trace List of the Old Edition

Constraints

Traces of a single account can be viewed on the CTS console. Multi-account traces can be viewed only on the Trace List page of each account, or in the OBS bucket or the CTS/system log stream configured for the management tracker with the organization function enabled.
You can only query operation records of the last seven days on the CTS console. To store operation records for more than seven days, you must configure an OBS bucket to transfer records to it. Otherwise, you cannot query the operation records generated seven days ago.
After performing operations on the cloud, you can query management traces on the CTS console 1 minute later and query data traces on the CTS console 5 minutes later.

Viewing Real-Time Traces in the Trace List of the New Edition

Log in to the console.
Click in the upper left corner and choose Management & Governance > Cloud Trace Service.
Choose Trace List in the navigation pane.
On the Trace List page, use advanced search to query traces. You can combine one or more filters.
- Trace Name: Enter a trace name.
- Trace ID: Enter a trace ID.
- Resource Name: Enter a resource name. If the cloud resource involved in the trace does not have a resource name or the corresponding API operation does not involve the resource name parameter, leave this field empty.
- Resource ID: Enter a resource ID. Leave this field empty if the resource has no resource ID or if resource creation failed.
- Trace Source: Select a cloud service name from the drop-down list.
- Resource Type: Select a resource type from the drop-down list.
- Operator: Select one or more operators from the drop-down list.
- Trace Status: Select normal, warning, or incident.
  - normal: The operation succeeded.
  - warning: The operation failed.
  - incident: The operation caused a fault that is more serious than the operation failure, for example, causing other faults.
- Time range: Select Last 1 hour, Last 1 day, or Last 1 week, or specify a custom time range.
On the Trace List page, you can also export and refresh the trace list, and customize the list display settings.
1. Enter any keyword in the search box and click to filter desired traces.
2. Click Export to export all traces in the query result as an .xlsx file. The file can contain up to 5,000 records.
3. Click to view the latest information about traces.
4. Click to customize the information to be displayed in the trace list. If Auto wrapping is enabled (), excess text will move down to the next line; otherwise, the text will be truncated. By default, this function is disabled.
For details about key fields in the trace structure, see Trace Structure and Example Traces.
(Optional) On the Trace List page of the new edition, click Go to Old Edition in the upper right corner to switch to the Trace List page of the old edition.

Viewing Real-Time Traces in the Trace List of the Old Edition

Log in to the console.
Click in the upper left corner and choose Management & Governance > Cloud Trace Service.
Choose Trace List in the navigation pane.
Each time you log in to the CTS console, the new edition is displayed by default. Click Go to Old Edition in the upper right corner to switch to the trace list of the old edition.
Specify the filters used for querying traces. The following filters are available:
- Trace Type, Trace Source, Resource Type, and Search By: Select a filter from the drop-down list.
  - If you select Resource ID for Search By, specify a resource ID.
  - If you select Trace name for Search By, specify a trace name.
  - If you select Resource name for Search By, specify a resource name.
- Operator: Select a specific operator (a user other than an account).
- Trace Status: Select All trace statuses, Normal, Warning, or Incident.
- Time Range: You can query traces generated during any time range of the last seven days.
- Click Export to export all traces in the query result as a CSV file. The file can contain up to 5,000 records.
Click Query.
On the Trace List page, you can also export and refresh the trace list.
- Click Export to export all traces in the query result as a CSV file. The file can contain up to 5,000 records.
- Click to view the latest information about traces.
Click on the left of a trace to expand its details.
Click View Trace in the Operation column. The trace details are displayed.
For details about key fields in the trace structure, see Trace Structure and Example Traces.
(Optional) On the Trace List page of the old edition, click New Edition in the upper right corner to switch to the Trace List page of the new edition.

IoTDA Operations That Can Be Recorded by CTS

Using Cloud Trace Service (CTS), you can view user and platform operations and results. If an exception occurs, you can locate and rectify the fault based on the logs. The table below lists IoTDA operations that are logged.

**Table 1** IoTDA operations that can be recorded by CTS
Category	Operation	Resource Type	Trace Name
Linkage rule management	Creating a rule	rules	createRules
	Deleting a rule	rules	deleteRules
	Updating a rule	rules	updateRules
	Modifying the rule status	rules	changeRuleStatus
JavaScript script management	Uploading JavaScript plug-in scripts	scripts	createScript
	Deleting JavaScript plug-in scripts	scripts	deleteScript
	Debugging JavaScript plug-in scripts	scripts	runScript
Function plug-in management	Uploading a Function plug-in	functions	createProductFunctions
	Deleting a Function plug-in	functions	deleteProductFunctions
	Downloading a Function plug-in	functions	getProductFunctions
Batch task management	Creating a batch task	batchtasks	createBatchtasks
	Retrying a batch task	batchtasks	retryBatchtasks
	Stopping a batch task	batchtasks	stopBatchtasks
	Deleting a batch task	batchtasks	deleteBatchtasks
Batch task file management	Uploading a batch task file	batchtask-files	uploadBatchTaskFile
Batch task file management	Deleting a batch task file	batchtask-files	deleteBatchTaskFile
Export tasks	Creating an export task	export-tasks	createExportTasks
	Deleting an export task	export-tasks	deleteExportTask
	Downloading an export file	export-tasks	createTaskreport
Application certificate management	Uploading a push CA certificate	Certificate	createCertificate
	Updating a push CA certificate	Certificate	updateCertificate
	Deleting a push CA certificate	Certificate	deleteCertificate
Certificate management	Uploading a device CA certificate	certificate	addCertificate
	Deleting a device CA certificate	certificate	deleteCertificate
	Commissioning the device CA certificate	certificate	debugCertificate
	Verifying a device CA certificate	certificate	verifyCertificate
	Downloading a device CA certificate	certificate	downloadCertificate
Server certificate management	Creating a certificate for the enterprise edition	ServerCertificate	addServerCertificate
	Replacing the certificate of the enterprise edition	ServerCertificate	updateServerCertificate
	Deleting a certificate of the enterprise edition	ServerCertificate	deleteServerCertificate
Resource space management	Creating a resource space	application	addApplication
	Deleting a resource space	application	deleteApplication
	Modifying a resource space	application	updateApplication
Access code management	Creating an access code	accessCode	createAccessCode
Access code management	Verifying an access code	accessCode	verifyAccessCode
Software/Firmware upgrade package management	Creating an OTA upgrade package	upgradeTask	uploadOtaPackages
Software/Firmware upgrade package management	Deleting an OTA upgrade package	upgradeTask	deleteOtaPackages
File storage and management	Configuring an OBS bucket for file upload.	upgradeTask	createBucket
Forwarding rule management	Creating a rule triggering condition	routing-rule	addRule
	Modifying a rule triggering condition	routing-rule	modifyRule
	Deleting a rule triggering condition	routing-rule	deleteRule
	Testing the SQL connectivity	rule-sql	checkSql
Forwarding rule action management	Creating a rule action	rule-action	addAction
	Modifying a rule action	rule-action	modifyAction
	Deleting a rule action	rule-action	deleteAction
	Testing the connectivity interface	rule-action	sendMessage
Outbound flow control policy management	Creating an outbound flow control policy	create-flow-control-policy	createRoutingFlowControlPolicy
	Updating an outbound flow control policy	update-flow-control-policy	updateRoutingFlowControlPolicy
	Deleting an outbound flow control policy	delete-flow-control-policy	deleteRoutingFlowControlPolicy
Outbound push stacking policy management	Creating an outbound push stacking policy	create-routing-backlog-policy	createRoutingBacklogPolicy
	Modifying an outbound push stacking policy	update-routing-backlog-policy	updateRoutingBacklogPolicy
	Deleting an outbound push stacking policy	delete-routing-backlog-policy	deleteRoutingBacklogPolicy
Device shadow	Configuring desired data in the device shadow	deviceShadow	updateDeviceShadow
Plug-in mapping management	Modifying the mapping	plugin	addMapping
Plug-in message management	Modifying message information	plugin	addMessage
Plug-in management	Deploying an online plug-in	plugin	deployPlugin
	Saving plug-in information	plugin	savePluginMessage
	Updating plug-in information	plugin	modifyPluginMessage
	Deploying an offline plug-in	plugin	bundlePackages
Simulator management	Registering and debugging a device simulator	plugin	registerEmulatedDevice
Device debugging messages	Sending upstream code stream	plugin	simulateReport
Tunnel management	Creating a tunnel	tunnels	createTunnel
	Deleting a tunnel	tunnels	deleteTunnel
	Modifying a tunnel	tunnels	updateTunnel
Product management	Creating a product	product	addProduct
	Modifying product information	product	updateProduct
	Deleting a product	product	deleteProduct
Custom topic management	Modifying a custom topic	topic	updateTopic
	Deleting a custom topic	topic	deleteTopic
	Creating a custom topic	topic	addTopic
Exception detection configuration	Configuring the exception detection	productConfig	addProductConfig
AMQP queue management	Creating an AMQP queue	amqp	addQueue
	Deleting an AMQP queue	amqp	deleteQueue
	Terminating the receive-link consumption capability	amqp	hangUpConnection
Cloud interconnection configuration management	Creating cloud interconnection configurations	service-integration	addServiceIntegrationConfig
	Deleting cloud interconnection configurations	service-integration	deleteServiceIntegrationConfig
	Modifying cloud interconnection configurations	service-integration	modifyServiceIntegrationConfig
Group management	Adding a group	device-group	addDeviceGroup
	Modifying a group	device-group	updateDeviceGroup
	Deleting a group	device-group	deleteDeviceGroup
	Managing devices in a group	device-group	manageDevicesInGroup
Device tag management	Binding a tag	tag	bindTagsToResource
Device tag management	Unbinding a tag	tag	unbindTagsToResource
Device management	Creating a device	device	addDevice
	Modifying device information	device	updateDevice
	Deleting a device	device	deleteDevice
	Resetting a device secret	device	resetDeviceSecret
	Freezing a device	device	freeze-device
	Unfreezing a device	device	unfreeze-device
HarmonyOS soft bus	Creating a HarmonyOS soft bus	harmony-soft-bus	create-harmony-soft-bus
	Deleting a HarmonyOS soft bus	harmony-soft-bus	delete-harmony-soft-bus
	Resetting a HarmonyOS soft bus key	harmony-soft-bus	reset-harmony-soft-bus-key
	Synchronizing a HarmonyOS soft bus	harmony-soft-bus	sync-harmony-soft-bus
Device proxy management	Deleting a device proxy	device-proxy	deleteDeviceProxy
	Creating a device proxy	device-proxy	addDeviceProxy
	Modifying a device proxy	device-proxy	updateDeviceProxy
Device policy management	Creating a device policy	device-policy	addDevicePolicy
	Deleting a device policy	device-policy	deleteDevicePolicy
	Updating a device policy	device-policy	updateDevicePolicy
	Binding a device policy	device-policy	bindDevicePolicy
	Unbinding a device policy	device-policy	unbindDevicePolicy
Message tracing management	Modifying message tracing configurations	message-trace	updateMessageTraceConfig
	Deleting message tracing configurations	message-trace	deleteMessageTraceConfig
	Deleting message tracing data	message-trace	deleteMessageTraceData
O&M configuration management	Modifying O&M configurations	device-config	updateDeviceConfig
Command management	Delivering a command	command	sendCommand
Command management	Delivering an asynchronous command	asyncCommand	sendAsyncCommand
Remote login	Creating an SSH channel	SshConnect	SshConnect
	Delivering an SSH command	SshComand	SshComand
	Disabling an SSH channel	SshDisconnect	SshDisconnect