Updated on 2023-04-10 GMT+08:00

Viewing Logs

Prerequisites

You have logged in to the Huawei Qiankun console and have the log audit service permission.

Context

Huawei Qiankun provides logs to help you quickly learn about the service running status and historical operations.

Currently, the console supports operation logs and security logs.

  • Operation logs record operations performed by users, such as handling compromised hosts, handling threat events, and managing devices.
  • Security logs record security-related operations, such as user login and lower-level workgroup account creation.

You can view logs generated in the last six months on the console. To view logs generated in the past 6–12 months, download them to your local PC.

A log contains information such as the operation name, operation object, operation result, and severity.

Procedure

  1. Click your account in the upper right corner, and click Logs.
  2. View, search for, and download logs. The following uses operation logs as an example. The operations that can be performed on security logs are similar.
    1. View the log list.

      On the Operation Logs page, view log information such as the name, object, and result of each operation.

      Figure 1 Log list

    2. View log details.

      Click the link in the Details column of a log to view log details.

      Figure 2 Log details

    3. Search for logs.

      Click Advanced Search, set search criteria based on Table 1, and click Search.

      Table 1 Search criteria

      Parameter

      Description

      Time

      Set the start time and end time to display logs generated in the specified period.

      Operation Name

      Enter the name of an operation.

      Severity

      Select log severity levels. The options include: Emergency, Alert, Critical, Error, Warning, Notice, Informational, and Debug, which are listed in descending order of severity.

      Operation User

      Enter an account used to perform operations.

      Details

      Enter description of an operation.

      Operation Object

      Enter a specific object, such as device, package, or site, on which operations are performed.

      Operation Result

      The options include Success, Failure, and Partial Success.

      You can click Reset to restore the search criteria to the default settings:
      • Records in the last 48 hours
      • All log severity levels
      • All operation results

    4. Download logs.

      You can view logs generated in the last six months on the console. To view logs generated in the past 6–12 months, click click here in the upper right corner to download the logs.