The GENERAL INFORMATION > LOGS page displays audit logs and service logs for the respective service. You can choose one of the following to display relevant events for the service: Audit Logs or Service Logs.
Complete the following to view log events:
On the Audit Logs or Service Logs page, click Display Recent to display the most recent 100 events.
or
Click
to activate the filtering feature, and then click
to configure your filter.
From the Basic Columns menu, choose the filtering criterion you want to add. For example, if you choose Timestamp, select an applicable timeline within which you want to filter the results, using the calendar provided. To add more filtering criteria, clickagain to add another criterion. When you are done, click
to filter the events.
You can also click
to remove the filter you just created. If you want to use the same criteria for future filtering, you can save the filter by clicking
and entering a name for the filter. You can then click
to find the saved filter in the future without setting the filtering criteria again.
Audit Logs
On the Audit Logs page, the Cloud Services Portal displays the following information for each event:
Timestamp: The UTC timestamp when the user performed the specific task.
User: The name of the user account that performed the task.
Source IP: The IP address of the source destination that initiated the task.
Resource Type: The resource with which the performed task was associated. For example, if a user performed a specific task to a host, this field displays the name of the host.
Action: The specific action that was performed by the user. For example, if a user updated a the configuration of the host, this field displays Update; and if a user deleted tags on a host, this fields displays Delete.
Event Summary: Displays information about the action that has been taken for the event.
To view more information for a specific event, click View Metadata to expand the panel to view the following:
Session Type: The type of authentication for the event session. For example, this can be bearer (which is session-based) or token (which is token-based).
Subject Role: The role of the subject who generated this event.
Session ID: The audit session ID associated with this login session.
App Identifier: The application source associated with this audit session.
Full Request URI: The full URI of the API request sent for this event.
API Request ID: The API request ID for this audit event.
Resource ID: The ID for the resource type.
HTTP Verb: The operation taken for the event. The most commonly used operations are POST, GET, PUT, PATCH, and DELETE.
HTTP Response Code: The HTTP status code that indicates whether the HTTP request associated with this event has been successfully completed. For example, code 200 indicates the request is successful.
Service Logs
On the Service Logs page, the Cloud Services Portal displays the following information for each event:
Timestamp: The UTC timestamp when the user performed the specific task.
OPID: The unique ID of the host.
Container Name: The name of the container in which the host is currently running.
Service ID: The ID of the service.
Downloading Logs in CSV Format
To download audit or service logs in CSV format, do the following:
On the Audit Logs or Service Logs page, click Download. The download file is in this format for audit logs: audit-log-the timestamp in UTC format.csv, such as
audit-log-10-10-2022, 10-30-59 PM UTC.csvand in this format for service logs: service-log-the timestamp in UTC format.csv, such asservice-log-10-10-2022, 10-30-59 PM UTC.csv.
You can also do the following:
Click the Sort by menu to choose the column by which you want to sort the events, and then use the up/down arrows to sort the events in ascending or descending order.
Enter the value that you want to search in the Search text box. The Cloud Services Portal displays the list of events that match the keyword in the text box.