Auditing

You can use Cloud Trace Service (CTS) to trace operations in CBR.

Prerequisites

CTS has been enabled.

Key Operations Recorded by CTS

Table 1 CBR operations that can be recorded by CTS

Operation

Resource Type

Trace Name

Creating a policy

policy

createPolicy

Updating a policy

policy

updatePolicy

Deleting a policy

policy

deletePolicy

Setting a vault policy

vault

associatePolicy

Removing a policy from a vault

vault

dissociatePolicy

Creating a vault

vault

createVault

Modifying a vault

vault

updateVault

Deleting a vault

vault

deleteVault

Removing resources

vault

removeResources

Adding resources

vault

addResources

Performing a replication

vault

replicateVaultBackup

Performing a backup

vault

createVaultBackup

Creating a backup

backup

createBackup

Deleting a backup

backup

deleteBackup

Synchronizing a backup

backup

syncBackup

Restoring a backup

backup

restoreBackup

Replicating a backup

backup

replicateBackup

Setting resources

vault

setResources

Migrating resources

vault

migrateResources

Disabling protection

vault

disableProtect

Deleting backups from a vault

vault

deleteVaultBackup

Synchronizing vault backups

vault

syncVaultBackup

Batch creating or deleting vault tags

vault

bulkCreateDeleteVaultTag

Creating a vault tag

vault

createVaultTag

Deleting a vault tag

vault

deleteVaultTag

Creating a share member

backup

createBackupMember

Updating a share member

backup

updateBackupMember

Deleting a share member

backup

deleteBackupMember

Updating a backup

backup

updateBackup

Viewing Audit Logs

For how to view audit logs, see section "Querying Real-Time Traces" in the Cloud Trace Service User Guide.

Disabling or Enabling a Tracker

The following procedure illustrates how to disable an existing tracker on the CTS console. After the tracker is disabled, the system will stop recording operations, but you can still view existing operation records.

  1. Log in to the management console.
  2. In the upper left corner of the page, click and select a region.
  3. Click Service List and choose Management & Deployment > Cloud Trace Service.
  4. Choose Tracker List in the left navigation pane. See Figure 1.

    Figure 1 Viewing trackers

  5. In the tracker list, click Disable in the Operation column.
  6. Click Yes.
  7. After the tracker is disabled, the available operation changes from Disable to Enable. To enable the tracker again, click Enable and then click Yes. The system will start recording operations again.