Auditing

Scenarios

Cloud Trace Service (CTS) records operations of SFS resources, facilitating query, audit, and backtracking.

Currently, only SFS Turbo file systems support recording of resource operations using CTS. SFS Capacity-Oriented file systems do not support this function.

Prerequisites

You have enabled CTS and the tracker is normal. For details about how to enable CTS, see section "Enabling CTS" in the Cloud Trace Service User Guide.

Operations

Table 1 SFS operations traced by CTS

Operation

Resource Type

Trace

Creating a shared file system

sfs

createShare

Modifying a shared file system

sfs

updateShareInfo

Deleting a shared file system

sfs

deleteShare

Adding a share access rule

sfs

addShareACL

Deleting a share access rule

sfs

deleteShareACL

Expanding a shared file system

sfs

extendShare

Shrinking a shared file system

sfs

shrinkShare

Querying Traces

  1. Log in to the management console.
  2. Click in the upper left corner and select a region and project.
  3. Choose Management & Deployment > Cloud Trace Service.

    The Cloud Trace Service page is displayed.

  4. In the navigation pane on the left, choose Trace List.
  5. On the trace list page, set Trace Source, Resource Type, and Search By, and click Query to query the specified traces.

    For details about other operations, see section "Querying Real-Time Traces" in the Cloud Trace Service User Guide.

Disabling or Enabling a Tracker

This section describes how to disable an existing tracker on the CTS console. After the tracker is disabled, the system will stop recording operations, but you can still view existing operation records.

  1. Log in to the management console.
  2. Click in the upper left corner and select a region and project.
  3. Choose Management & Deployment > Cloud Trace Service.

    The Cloud Trace Service page is displayed.

  4. Click Trackers in the left pane.
  5. Click Disable on the right of the tracker information.
  6. Click Yes.
  7. After the tracker is disabled, the available operation changes from Disable to Enable. To enable the tracker again, click Enable and then click Yes. The system will start recording operations again.
Parent topic: Management