Viewing Logstash Cluster Audit Logs
To ensure data security and compliance, enterprises must routinely record and audit operations performed on their cloud service resources. With Cloud Trace Service (CTS), you can record operations associated with CSS Logstash clusters for later query, auditing, and backtracking.
Prerequisites
CTS has been enabled.
Key Operations That Can Be Audited Using CTS
|
Operation |
Resource Type |
Event Name |
|---|---|---|
|
Querying product dynamics on the Overview page |
cluster |
listByGraph |
|
Querying cluster and disk information on the Dashboards page |
cluster |
showDashboard |
|
Querying supported engine types |
cluster |
listDatastores |
|
Querying flavors supported by a specified engine type |
cluster |
getSingleDatabaseFlavors |
|
Querying supported AZs |
user |
getAZInfo |
|
Querying available disk types |
cluster |
listDiskTypes |
|
Obtaining the node flavor list |
cluster |
listFlavors |
|
Querying details about a specified flavor |
cluster |
showFlavorDetail |
|
Querying feature availability |
user |
showFunctionSwitch |
|
Querying available resource quotas |
user |
queryQuota |
|
Creating a cluster |
cluster |
createCluster |
|
Querying the cluster list |
cluster |
listClusters |
|
Querying cluster details |
cluster |
showClusterDetail |
|
Querying the storage capacity of a cluster |
cluster |
getClusterDiskInfos |
|
Performing authentication for a yearly/monthly cluster and obtaining allowed operations |
cluster |
serviceAuthentication |
|
Changing the billing mode of a cluster from pay-per-use to yearly/monthly |
cluster |
updateOndemandClusterToPeriod |
|
Querying the price of a yearly/monthly subscription when switching from pay-per-use |
cluster |
onDemandToPeriodInquiry |
|
Updating resource status |
cluster |
updateServiceStatus |
|
Updating resource metadata |
cluster |
updateServiceMetadata |
|
Changing the cluster name |
cluster |
updateClusterName |
|
Modifying the cluster description |
cluster |
updateClusterDesc |
|
Clearing the status of a specified task for a cluster |
cluster |
clearClusterAction |
|
Forcibly restarting VMs in a cluster |
cluster |
rebootCluster |
|
Deleting a cluster |
cluster |
deleteCluster |
|
Creating a cluster (V2) |
cluster |
createClusterV2 |
|
Querying the cluster list |
cluster |
listClustersDetails |
|
Querying the cluster list (V2) |
cluster |
listClustersDetailsV2 |
|
Changing the security group |
cluster |
changeSecurityGroup |
|
Adding more instances |
cluster |
updateExtendInstanceStorage |
|
Removing nodes of a specific type |
cluster |
updateShrinkCluster |
|
Querying information about nodes to be deleted |
cluster |
queryNeedDeleteInstances |
|
Changing the flavor of a specified node type |
cluster |
updateFlavorByType |
|
Querying available flavors |
cluster |
queryResizeFlavors |
|
Querying all tags |
cluster |
listClustersTags |
|
Querying the tags of a specified cluster |
cluster |
showClusterTag |
|
Adding tags for a cluster |
cluster |
createClustersTags |
|
Deleting the tags of a cluster |
cluster |
deleteClustersTags |
|
Adding or deleting cluster tags in batches |
cluster |
updateBatchClustersTags |
|
Creating a configuration file |
cluster |
createCnf |
|
Updating a configuration file |
cluster |
updateCnf |
|
Starting a data migration pipeline |
cluster |
startPipeline |
|
Stopping a data migration pipeline |
cluster |
stopPipeline |
|
Adding a custom template |
cluster |
addFavorite |
|
Testing connectivity |
cluster |
startConnectivityTest |
|
Querying the template list |
cluster |
listTemplates |
|
Querying the configuration file list |
cluster |
listConfs |
|
Querying the pipeline list |
cluster |
listPipelines |
|
Querying operation records |
cluster |
listActions |
|
Querying the content of a configuration file |
cluster |
showGetConfDetail |
|
Deleting a configuration file |
cluster |
deleteConf |
|
Deleting a custom template |
cluster |
deleteTemplate |
|
Hot-starting a data migration pipeline |
cluster |
startHotPipeline |
|
Hot-stopping a data migration pipeline |
cluster |
stopHotPipeline |
|
Updating cluster routes |
cluster |
updateRoute |
|
Obtaining a cluster route |
cluster |
getRoutes |
|
Uploading a certificate file |
cluster |
uploadCerts |
|
Querying the certificate list |
cluster |
listCerts |
|
Querying certificate information |
cluster |
showCertsDetail |
|
Deleting a certificate file |
cluster |
deleteCerts |
|
Enabling logging |
cluster |
startLogs |
|
Disabling logging |
cluster |
stopLogs |
|
Querying the log backup task list |
cluster |
listLogsJob |
|
Querying basic log configurations |
cluster |
showGetLogSetting |
|
Modifying basic log configurations |
cluster |
updateLogSetting |
|
Enabling automatic log backup |
cluster |
startLogAutoBackupPolicy |
|
Disabling automatic log backup |
cluster |
stopLogAutoBackupPolicy |
|
Backing up logs |
cluster |
createLogBackup |
|
Querying logs |
cluster |
showLogBackup |
|
Creating an agency |
user |
createAgency |
|
Querying the agency list |
cluster |
listAgencies |
|
Querying available OBS buckets |
user |
getAvailableBuckets |
|
Querying files in a specified OBS bucket |
cluster |
listObjects |
|
Querying resources by tag |
cluster |
getResourceByTags |
Querying Real-Time Traces
After a management tracker is created on the CTS console, the system starts recording operations performed on cloud service resources. After a data tracker is created, the system starts recording operations performed on data in OBS buckets. CTS retains operation records generated in the latest seven days.
To view or export operation records of the last seven days on the CTS console, see Querying Real-Time Traces.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot
