Help Center/ IoT Device Access/ User Guide/ Monitoring and O&M/ Audit Logs
Updated on 2024-04-29 GMT+08:00
View PDF
Share

Audit Logs

Scenarios

After you enable CTS and the management tracker is created, CTS starts recording operations on cloud resources. After a data tracker is created, the system starts to record user operations on data in OBS buckets. CTS retains operation records of the latest seven days.

This section describes how to query and export operation records of the last seven days on the CTS console.

Constraints

  • Traces of a single account can be viewed on the CTS console. Multi-account traces can be viewed only on the Trace List page of each account, or in the OBS bucket or the CTS/system log stream configured for the management tracker with the organization function enabled.
  • You can only query operation records of the last seven days on the CTS console. To store operation records for more than seven days, you must configure an OBS bucket to transfer records to it. Otherwise, you cannot query the operation records generated seven days ago.
  • After performing operations on the cloud, you can query management traces on the CTS console 1 minute later and query data traces on the CTS console 5 minutes later.

Viewing Real-Time Traces in the Trace List of the New Edition

  1. Log in to the console.
  2. Click in the upper left corner and choose Management & Governance > Cloud Trace Service.
  3. Choose Trace List in the navigation pane.
  4. On the Trace List page, use advanced search to query traces. You can combine one or more filters.

    • Trace Name: Enter a trace name.
    • Trace ID: Enter a trace ID.
    • Resource Name: Enter a resource name. If the cloud resource involved in the trace does not have a resource name or the corresponding API operation does not involve the resource name parameter, leave this field empty.
    • Resource ID: Enter a resource ID. Leave this field empty if the resource has no resource ID or if resource creation failed.
    • Trace Source: Select a cloud service name from the drop-down list.
    • Resource Type: Select a resource type from the drop-down list.
    • Operator: Select one or more operators from the drop-down list.
    • Trace Status: Select normal, warning, or incident.
      • normal: The operation succeeded.
      • warning: The operation failed.
      • incident: The operation caused a fault that is more serious than the operation failure, for example, causing other faults.
    • Time range: Select Last 1 hour, Last 1 day, or Last 1 week, or specify a custom time range.

  5. On the Trace List page, you can also export and refresh the trace list, and customize the list display settings.

    1. Enter any keyword in the search box and click to filter desired traces.
    2. Click Export to export all traces in the query result as an .xlsx file. The file can contain up to 5,000 records.
    3. Click to view the latest information about traces.
    4. Click to customize the information to be displayed in the trace list. If Auto wrapping is enabled (), excess text will move down to the next line; otherwise, the text will be truncated. By default, this function is disabled.

  6. For details about key fields in the trace structure, see Trace Structure and Example Traces.
  7. (Optional) On the Trace List page of the new edition, click Go to Old Edition in the upper right corner to switch to the Trace List page of the old edition.

Viewing Real-Time Traces in the Trace List of the Old Edition

  1. Log in to the console.
  2. Click in the upper left corner and choose Management & Governance > Cloud Trace Service.
  3. Choose Trace List in the navigation pane.
  4. Each time you log in to the CTS console, the new edition is displayed by default. Click Go to Old Edition in the upper right corner to switch to the trace list of the old edition.
  5. Specify the filters used for querying traces. The following filters are available:

    • Trace Type, Trace Source, Resource Type, and Search By: Select a filter from the drop-down list.
      • If you select Resource ID for Search By, specify a resource ID.
      • If you select Trace name for Search By, specify a trace name.
      • If you select Resource name for Search By, specify a resource name.
    • Operator: Select a specific operator (a user other than an account).
    • Trace Status: Select All trace statuses, Normal, Warning, or Incident.
    • Time Range: You can query traces generated during any time range of the last seven days.
    • Click Export to export all traces in the query result as a CSV file. The file can contain up to 5,000 records.

  6. Click Query.
  7. On the Trace List page, you can also export and refresh the trace list.

    • Click Export to export all traces in the query result as a CSV file. The file can contain up to 5,000 records.
    • Click to view the latest information about traces.

  8. Click on the left of a trace to expand its details.

  9. Click View Trace in the Operation column. The trace details are displayed.

  10. For details about key fields in the trace structure, see Trace Structure and Example Traces.
  11. (Optional) On the Trace List page of the old edition, click New Edition in the upper right corner to switch to the Trace List page of the new edition.

IoTDA Operations That Can Be Recorded by CTS

Using Cloud Trace Service (CTS), you can view user and platform operations and results. If an exception occurs, you can locate and rectify the fault based on the logs. The table below lists IoTDA operations that are logged.

Table 1 IoTDA operations that can be recorded by CTS

Category

Operation

Resource Type

Trace Name

Linkage rule management

Creating a rule

rules

createRules

Deleting a rule

rules

deleteRules

Updating a rule

rules

updateRules

Modifying the rule status

rules

changeRuleStatus

JavaScript script management

Uploading JavaScript plug-in scripts

scripts

createScript

Deleting JavaScript plug-in scripts

scripts

deleteScript

Debugging JavaScript plug-in scripts

scripts

runScript

Function plug-in management

Uploading a Function plug-in

functions

createProductFunctions

Deleting a Function plug-in

functions

deleteProductFunctions

Downloading a Function plug-in

functions

getProductFunctions

Batch task management

Creating a batch task

batchtasks

createBatchtasks

Retrying a batch task

batchtasks

retryBatchtasks

Stopping a batch task

batchtasks

stopBatchtasks

Deleting a batch task

batchtasks

deleteBatchtasks

Batch task file management

Uploading a batch task file

batchtask-files

uploadBatchTaskFile

Deleting a batch task file

batchtask-files

deleteBatchTaskFile

Export tasks

Creating an export task

export-tasks

createExportTasks

Deleting an export task

export-tasks

deleteExportTask

Downloading an export file

export-tasks

createTaskreport

Application certificate management

Uploading a push CA certificate

Certificate

createCertificate

Updating a push CA certificate

Certificate

updateCertificate

Deleting a push CA certificate

Certificate

deleteCertificate

Certificate management

Uploading a device CA certificate

certificate

addCertificate

Deleting a device CA certificate

certificate

deleteCertificate

Commissioning the device CA certificate

certificate

debugCertificate

Verifying a device CA certificate

certificate

verifyCertificate

Downloading a device CA certificate

certificate

downloadCertificate

Server certificate management

Creating a certificate for the enterprise edition

ServerCertificate

addServerCertificate

Replacing the certificate of the enterprise edition

ServerCertificate

updateServerCertificate

Deleting a certificate of the enterprise edition

ServerCertificate

deleteServerCertificate

Resource space management

Creating a resource space

application

addApplication

Deleting a resource space

application

deleteApplication

Modifying a resource space

application

updateApplication

Access code management

Creating an access code

accessCode

createAccessCode

Verifying an access code

accessCode

verifyAccessCode

Software/Firmware upgrade package management

Creating an OTA upgrade package

upgradeTask

uploadOtaPackages

Deleting an OTA upgrade package

upgradeTask

deleteOtaPackages

File storage and management

Configuring an OBS bucket for file upload.

upgradeTask

createBucket

Forwarding rule management

Creating a rule triggering condition

routing-rule

addRule

Modifying a rule triggering condition

routing-rule

modifyRule

Deleting a rule triggering condition

routing-rule

deleteRule

Testing the SQL connectivity

rule-sql

checkSql

Forwarding rule action management

Creating a rule action

rule-action

addAction

Modifying a rule action

rule-action

modifyAction

Deleting a rule action

rule-action

deleteAction

Testing the connectivity interface

rule-action

sendMessage

Outbound flow control policy management

Creating an outbound flow control policy

create-flow-control-policy

createRoutingFlowControlPolicy

Updating an outbound flow control policy

update-flow-control-policy

updateRoutingFlowControlPolicy

Deleting an outbound flow control policy

delete-flow-control-policy

deleteRoutingFlowControlPolicy

Outbound push stacking policy management

Creating an outbound push stacking policy

create-routing-backlog-policy

createRoutingBacklogPolicy

Modifying an outbound push stacking policy

update-routing-backlog-policy

updateRoutingBacklogPolicy

Deleting an outbound push stacking policy

delete-routing-backlog-policy

deleteRoutingBacklogPolicy

Device shadow

Configuring desired data in the device shadow

deviceShadow

updateDeviceShadow

Plug-in mapping management

Modifying the mapping

plugin

addMapping

Plug-in message management

Modifying message information

plugin

addMessage

Plug-in management

Deploying an online plug-in

plugin

deployPlugin

Saving plug-in information

plugin

savePluginMessage

Updating plug-in information

plugin

modifyPluginMessage

Deploying an offline plug-in

plugin

bundlePackages

Simulator management

Registering and debugging a device simulator

plugin

registerEmulatedDevice

Device debugging messages

Sending upstream code stream

plugin

simulateReport

Tunnel management

Creating a tunnel

tunnels

createTunnel

Deleting a tunnel

tunnels

deleteTunnel

Modifying a tunnel

tunnels

updateTunnel

Product management

Creating a product

product

addProduct

Modifying product information

product

updateProduct

Deleting a product

product

deleteProduct

Custom topic management

Modifying a custom topic

topic

updateTopic

Deleting a custom topic

topic

deleteTopic

Creating a custom topic

topic

addTopic

Exception detection configuration

Configuring the exception detection

productConfig

addProductConfig

AMQP queue management

Creating an AMQP queue

amqp

addQueue

Deleting an AMQP queue

amqp

deleteQueue

Terminating the receive-link consumption capability

amqp

hangUpConnection

Cloud interconnection configuration management

Creating cloud interconnection configurations

service-integration

addServiceIntegrationConfig

Deleting cloud interconnection configurations

service-integration

deleteServiceIntegrationConfig

Modifying cloud interconnection configurations

service-integration

modifyServiceIntegrationConfig

Group management

Adding a group

device-group

addDeviceGroup

Modifying a group

device-group

updateDeviceGroup

Deleting a group

device-group

deleteDeviceGroup

Managing devices in a group

device-group

manageDevicesInGroup

Device tag management

Binding a tag

tag

bindTagsToResource

Unbinding a tag

tag

unbindTagsToResource

Device management

Creating a device

device

addDevice

Modifying device information

device

updateDevice

Deleting a device

device

deleteDevice

Resetting a device secret

device

resetDeviceSecret

Freezing a device

device

freeze-device

Unfreezing a device

device

unfreeze-device

HarmonyOS soft bus

Creating a HarmonyOS soft bus

harmony-soft-bus

create-harmony-soft-bus

Deleting a HarmonyOS soft bus

harmony-soft-bus

delete-harmony-soft-bus

Resetting a HarmonyOS soft bus key

harmony-soft-bus

reset-harmony-soft-bus-key

Synchronizing a HarmonyOS soft bus

harmony-soft-bus

sync-harmony-soft-bus

Device proxy management

Deleting a device proxy

device-proxy

deleteDeviceProxy

Creating a device proxy

device-proxy

addDeviceProxy

Modifying a device proxy

device-proxy

updateDeviceProxy

Device policy management

Creating a device policy

device-policy

addDevicePolicy

Deleting a device policy

device-policy

deleteDevicePolicy

Updating a device policy

device-policy

updateDevicePolicy

Binding a device policy

device-policy

bindDevicePolicy

Unbinding a device policy

device-policy

unbindDevicePolicy

Message tracing management

Modifying message tracing configurations

message-trace

updateMessageTraceConfig

Deleting message tracing configurations

message-trace

deleteMessageTraceConfig

Deleting message tracing data

message-trace

deleteMessageTraceData

O&M configuration management

Modifying O&M configurations

device-config

updateDeviceConfig

Command management

Delivering a command

command

sendCommand

Delivering an asynchronous command

asyncCommand

sendAsyncCommand

Remote login

Creating an SSH channel

SshConnect

SshConnect

Delivering an SSH command

SshComand

SshComand

Disabling an SSH channel

SshDisconnect

SshDisconnect
Parent topic: Monitoring and O&M