Desktop Log Stream Overview

You can interconnect Workspace with Log Tank Service (LTS) to obtain the desktop operation records of terminal users in real time. After creating a log, you can view the log stream records of a cloud desktop in the configured log group. The collection of log stream data or the creation/deletion of log streams does not affect the throughput or latency of your network.

Workspace's log stream function is free of charge, but you may be charged for other cloud service resources used.
By default, a tenant can create up to 100 log groups in a project, and a log group can contain up to 100 log streams.
Logs are stored in LTS servers. Billing starts once the interconnection with LTS is successful. For details, see LTS Pricing Details.

Log data

After creating a log, you can view the operation records of a desktop through the log stream. Events (including desktop startup, shutdown, restart, hibernation, connection, and disconnection; application startup and termination) are logged to generate log stream data. The log stream data includes the project ID, username, and event type. For details, see Table 1.

**Table 1** Log stream fields
Field	Description	Example Value
projectId	Project ID	0ea1d70db800f39f2f65c01e1394dxxx
username	Username	user01
workspaceId	Enterprise ID	FaultAD
eventType	Event type	loginByCustomAuthSystem
eventTime	Event time	2025-03-20T10:00:08Z
resourceType	Resource type	USER
resourceId	Resource ID	1b7edbd71aa646bcbba8d4f4ba38c251
resourceName	Resource name	user01
clientType	Client type	Windows
clientIp	Client IP address	7.22.23.xx
clientMac	Client MAC address	fa-xx-3e-xx-93-29
clientVersion	Client version	25.x.x.x
sourceIp	Source IP address	100.68.66.xx
isSuccess	Whether the request is successful	true
apiUrl	Request path	/v2/access/auth/by-ticket
actionType	Behavior type	USER
error_code	Error code	WKS.00030100
error_msg	Error message	The username or password is incorrect xxxxxx