Skip to main content

Manage logging

Topics

• Manage operation logs

• Manage audit logs

• Collect log files

Manage operation logs​

Operation logs reflect the daily operation status of the system and service operation processes, which

help administrators monitor system status, troubleshoot faults, and optimize operations workflows.

Features

• Filter operation logs

• Reset the operation log filter criteria

• Clear operation logs

• Download operation logs

• Export operation logs

Filter operation logs​

Perform this task to filter operation logs.

Restrictions and guidelines

• Operation logs with login name $SYSTEM record the automatic operations of the system. For example, after the system performs an automatic VM backup, the system automatically generates an operation log with login name $SYSTEM and operator name $SYSTEM.

• Operation logs with login name admin@VMC-RS are logs generated when third-party systems call the REST interface of the system.

Procedure

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Operation Logs.

  3. Set filter criteria as described in "Parameters," and then click Filter.

  4. To collapse the filters area, click Collapse.

  5. To display more filters, click More.

Parameters

• Login Name: Enter the login name of the operator.

• Operator Name: Enter the name of the operator.

Reset the operation log filter criteria​

  1. On the top navigation bar, click Ops.

    1. From the left navigation pane, select Logging > Operation Logs.

    2. Click Reset to restore default filter criteria.

Clear operation logs​

Download operation logs​

Perform this task to download the operation logs that match the filter criteria.

Restrictions and guidelines

With CASE enabled, please note that the Integrity Check column is not included in the downloaded operation log files.

Procedure

  1. On the top navigation bar, click Ops.

Export operation logs​

Perform this task to export operation logs generated by the platform to a specified local directory or a

remote server. These operation logs record all user operations performed on the platform. Exporting operation logs is typically used for troubleshooting or performance analysis. By analyzing and monitoring the exported operation logs, you can identify potential security risks and abnormal behaviors, and take timely countermeasures. The platform performs a full export for the first operation log export, and incremental exports for subsequent operation log exports. The number of export operations is not limited. You can view the exported log files at the specified location at the CLI of the export destination. The name of a full export log file is in the file name+date format, and the name of an incremental export log file is in the file name+start time-end time format.

Procedure

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Operation Logs.

  3. Click Export.

  4. Configure the parameters as described in "Parameters."

  5. Click Save.

Parameters

• Export Location: Select the location to save the exported operation log files. Options include Local Directory and Remote Server. If you select Remote Server, configure the following parameters:

○ IP: Enter the IP address of the remote server.

○ Username: Enter the username used to access the remote server. The account must have the read and write permissions. If you select the FTP connection mode, the account must be created on the remote FTP server. If you select the SCP connection mode, the account must be created on the remote server OS.

○ Edit Password: Select whether to edit the password for accessing the remote server.

○ Password: Enter the password corresponding to the username.

○ Connection Mode: Transfer protocol used to transfer exported log files to the remote server. Options include FTP and SCP. If you select FTP, only Server-U, VsFTP, and IIS FTP servers are supported.

○ Test Connectivity: Test the connectivity between the management platform and the remote server in real time

○ Export Directory: Directory where the exported log files are stored on the remote server.

○ Server Port: Port number of the remote server.

If you select Local Directory, configure the following parameter: Export Directory: Directory where the exported log files are stored on the host running the management platform.

• Regular Export: Configure whether to enable automatic export or not. If you enable automatic export, configure the following parameters:

Manage audit logs​

Audit logs record operators' actions on the management platform, detailing "who did what to which

resource and when." Audit logs form a complete, traceable, and tamper-proof action trail that provides a reliable basis for security incident analysis and compliance review. The management platform automatically extracts operators' actions on the platform, physical resources, and virtual resources from syslogs and generates the corresponding audit logs.

Features

• Manage operation audit logs

• Manage physical resource audit logs

• Manage virtual resource audit logs

Manage behavior audit logs​

Behavior audit can comprehensively record operators' actions on the management platform, which

provides a reliable basis for security audit.

Display behavior audit logs

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Behavior Audit.

Filter behavior audit logs

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Behavior Audit.

  3. Configure the filter criteria as described in "Parameters.", and then click Filter.

  4. Click Reset to display all behavior audit logs.

  5. To hide the advanced filters, click Collapse. To display more filters, Click More.

Clear behavior audit logs

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Behavior Audit.

  3. Click Clear.

  4. Specify a date. Behavior audit logs generated before the date will be cleared.

  5. Click OK.

Download behavior audit logs

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Behavior Audit.

  3. Click the download icon.

  4. In the dialog box that opens, click OK to download all behavior audit logs that match the filter criteria.

Parameters

• Login Name: Account for the operator to log in to the management platform.

• Operator Name: Name of the operator.

• Start Time: Start time for operations. You can enter a date or select a date from the pop-up calendar.

• End Time: End time for operations. You can enter a date or select a date from the pop-up calendar.

• Login Address: IP address of the computer that the operator uses to log in to the management platform.

• Description: Description for the operation.

• Result: Execution result for the operation. Options include All, Succeeded, Failed, and Partially Succeeded.

• Target: Operation target.

• Risk Level: Operation risk level, including All, High, Medium, and Low.

• Integrity Check: Signature verification result of the action executed by an operator, which can be Unsigned, Verification Success, or Tampered. This parameter is displayed only after CASE is configured.

• Reason: Detailed reason for the failure.

• Action: Event type of the action performed by the operator.

Manage physical resource audit logs​

The physical resource audit feature records actions performed by operators on physical resources in

the management platform, including adding resources, removing resources, and making configuration changes. It helps users trace and verify the use and management of physical resources, providing a reliable basis for security audit and compliance management.

Display physical resource audit log information

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Physical Resources.

Filter physical resource audit logs

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Physical Resources.

  3. Configure the filter parameters (see "Parameters"), and then click Filter. The matching physical resource audit logs are displayed.

  4. To display all physical resource audit logs, click Reset.

  5. To hide the advanced filters, click Collapse. To display more filters, Click More.

Clear physical resource audit logs

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Physical Resources.

  3. Click Clear.

  4. In the dialog box that opens, enter or select a date.

  5. Click OK.

Download physical resource audit logs

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Physical Resources.

  3. Click the download icon.

  4. In the dialog box that opens, click OK.

Parameters

• Login Name: Name for the operator to log in to the management platform.

• Operator Name: Name of the operator.

• Start Time: Start time of the operation. You can enter a date or select it from the pop-up calendar.

• End Time: End time of the operation. You can enter a date or select it from the pop-up calendar.

• Login Address: IP address of the computer that the operator uses to log in to the system.

Manage virtual resource audit logs​

The virtual resource audit feature records actions performed by operators on virtual resources in the

management platform. Detailed logs allow users to trace and verify virtual resource usage, providing reliable basis for security audit and compliance management.

Display virtual resource audit log information

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Virtual Resources.

Filter virtual resource audit logs

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Virtual Resources.

  3. Configure the filter parameters (see "Parameters"), and then click Filter. The matching virtual resource audit logs are displayed.

  4. To display all virtual resource audit logs, click Reset.

  5. To hide the advanced filters, click Collapse. To display more filters, Click More.

Clear virtual resource audit logs

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Virtual Resources.

  3. Click Clear.

  4. In the dialog box that opens, enter or select a date.

  5. Click OK.

Download virtual resource audit logs

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Audit Logs > Virtual Resources.

  3. Click the download icon.

  4. In the dialog box that opens, click OK.

Parameters

• Login Name: Name for the operator to log in to the management system.

• Operator Name: Name of the operator.

• Start Time: Start time of the operation. You can enter a date or select it from the pop-up calendar.

• End Time: End time of the operation. You can enter a date or select it from the pop-up calendar.

• Login Address: IP address of the computer that the operator uses to log in to the system.

• Description: Description for the operation.

• Result: Select an operation result. Options include All, Succeeded, Failed, and Partially Succeeded.

• Target: Operation target.

• Risk Level: Select an operation risk level. Options include All, High, Medium, and Low.

• Reason: Detailed reason for the failure.

• Action: Event type of the action performed by the operator.

• Action Type: Type of the virtual resource audit action.

• Clear Logs Before: Select a day to clear logs generated before this day. You cannot clear the virtual resource audit logs if their lifetime has not expired. To set the lifetime of logs, see "Configure system parameters."

Collect log files​

Perform this task to collect and download the log files of the system and hosts managed by the

system,.

Restrictions and guidelines

With RBAC enabled, only security auditors can collect log files. If the system fails to collect log files for a host, the host name will be displayed on the page that appears after the log file collection.

Collect host log files

Procedure

  1. On the top navigation bar, click Ops.

  2. From the left navigation pane, select Logging > Log Collection.

  3. Enter the log file size, select a time range, select the target hosts for log collection, and then click Collect.

  4. To download the log files, click Download Log Files.

Parameters

• Physical Host Virtualization Log File Size: Specify the size (in MB) of log files that the system can collect for each host. If the log file size of a host exceeds this limit, the system does not collect the excessive logs.