Updated on 2024-03-14 GMT+08:00

Viewing an Audit Trace

After you enable CTS, the system starts recording operations on WAF. You can view the operation records for the last seven days on the CTS console.

Viewing WAF Logs on the CTS console

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click in the upper left corner of the management console and select Cloud Trace Service under Management & Deployment.
  4. Choose Trace List in the navigation pane.
  5. Click Filter and specify filtering criteria as needed. The following four filters are available:

    • Trace Type, Trace Source, Resource Type, and Search By.
      • Set Trace Type to Management.
      • Set Trace Source to WAF.
      • When you select Resource ID for Search By, you also need to enter a resource ID.
    • Operator: Select a specific operator (a user other than tenant).
    • Trace Status: Available options include All trace statuses, normal, warning, and incident. You can only select one of them.
    • Time Range: In the upper right corner of the page, you can query traces in the last 1 hour, last 1 day, last 1 week, or within a customized period.

  6. Click Query.
  7. Click on the left of a trace to see its details.

    Figure 1 Expanding trace details

  8. Click View Trace in the Operation column. In the displayed View Trace dialog box, the trace structure details are displayed.

    Figure 2 Viewing the trace