Auditing¶
You can use Cloud Trace Service (CTS) to trace operations in CBR.
Prerequisites¶
CTS has been enabled.
Key Operations Recorded by CTS¶
Operation | Resource Type | Trace Name |
|---|---|---|
Creating a policy | policy | createPolicy |
Updating a policy | policy | updatePolicy |
Deleting a policy | policy | deletePolicy |
Setting a vault policy | vault | associatePolicy |
Removing a policy from a vault | vault | dissociatePolicy |
Creating a vault | vault | createVault |
Modifying a vault | vault | updateVault |
Deleting a vault | vault | deleteVault |
Removing resources | vault | removeResources |
Adding resources | vault | addResources |
Performing a replication | vault | replicateVaultBackup |
Performing a backup | vault | createVaultBackup |
Creating a backup | backup | createBackup |
Deleting a backup | backup | deleteBackup |
Synchronizing a backup | backup | syncBackup |
Restoring a backup | backup | restoreBackup |
Replicating a backup | backup | replicateBackup |
Setting resources | vault | setResources |
Migrating resources | vault | migrateResources |
Disabling protection | vault | disableProtect |
Deleting backups from a vault | vault | deleteVaultBackup |
Synchronizing vault backups | vault | syncVaultBackup |
Batch creating or deleting vault tags | vault | bulkCreateDeleteVaultTag |
Creating a vault tag | vault | createVaultTag |
Deleting a vault tag | vault | deleteVaultTag |
Creating a share member | backup | createBackupMember |
Updating a share member | backup | updateBackupMember |
Deleting a share member | backup | deleteBackupMember |
Updating a backup | backup | updateBackup |
Viewing Audit Logs¶
For how to view audit logs, see section "Querying Real-Time Traces" in the Cloud Trace Service User Guide.
Disabling or Enabling a Tracker¶
The following procedure illustrates how to disable an existing tracker on the CTS console. After the tracker is disabled, the system will stop recording operations, but you can still view existing operation records.
Log in to the management console.
In the upper left corner of the page, click
and select a region.Click Service List and choose Management & Deployment > Cloud Trace Service.
Choose Tracker List in the left navigation pane. See Figure 1.
Figure 1 Viewing trackers¶
In the tracker list, click Disable in the Operation column.
Click Yes.
After the tracker is disabled, the available operation changes from Disable to Enable. To enable the tracker again, click Enable and then click Yes. The system will start recording operations again.