WhenyouenableCTSforthefirsttime,amanagementtrackernamedsystemiscreatedautomatically.YoucanalsomanuallycreatemultipledatatrackersontheTrackerListpage.
Thmanagementtrackeridentifiesandassociateswithallcloudservicesyourtenantaccountisusing,andrecordsalloperationsofyourtenantaccount.Datatrackersrecorddetailsofthetenant'soperationsondatainOBSbuckets.
Amanagementtrackerand100datatrackerscanbecreatedforatenantaccount.
TracesareoperationlogsofcloudserviceresourcesandarecapturedandstoredbyCTS.Youcanviewtracestogettoknowdetailsofoperationsperformedonspecificresources.
Tracesreportedbycloudservices.
TracesofreadandwriteoperationsreportedbyOBS.
Thetracelistdisplaystracesgeneratedinthelastsevendays.Thesetracesrecordoperations(inthelasthourbydefault)oncloudserviceresources,includingcreation,modification,anddeletion,butdonotrecordqueryoperations.Therearetwotypesoftraces:
Atracefileisacollectionoftraces.CTSgeneratestracefilesbasedonservicesandtransfercycleandsendthesefilestoyourspecifiedOBSbucketinrealtime.Inmostcases,alltracesofaservicegeneratedinatransfercyclearecompressedintoonetracefile.However,iftherearealargenumberoftraces,CTSwilladjustthenumberoftracescontainedineachtracefile.
TracesfilesareinJSONformat.Thefollowingisanexampleofatracefile.
Theauthenticityofoperationrecordsduringasecurityincidentinvestigationisoftenaffectedbytracefilesbeingdeletedortamperedwith.Therecordsthereforecannotbeusedasaneffectivebasisforinvestigation.Therefore,CTSprovidestracefileintegrityverificationtohelpyouensuretheauthenticityoftracefiles.
TheverificationfunctionfortracefileintegrityadoptsindustrystandardalgorithmsandgeneratesaHashvalueforeachtracefile.ThisHashvaluechangeswhenthetracefileismodifiedordeleted.Therefore,bytrackingtheHashvalue,youcanconfirmwhetherthetracefileismodified.Inaddition,theRSAalgorithmisusedtosignonthedigestfiletoensurethatthefileisnotmodified.Inthisway,anyoperationsofmodifyingordeletingtracefilesarerecordedbyCTS.
Aftertheverificationfunctionfortracefileintegrityisenabled,CTSgeneratesadigestfileforHashvaluesofalltracefilesrecordedinthepasthourandsynchronizesthedigestfiletoanOBSbucketconfiguredforthecurrenttracker.
CTSsignsoneachdigestfileusingpublicandprivatekeys.YoucanverifythedigestfileusingthepublickeyafterthefileisstoredtotheOBSbucket.
AregionreferstoageographicareawheretheserverforinstallingCTSislocated.AZsinthesamegeographicareacancommunicatewitheachotherthroughaninternalnetwork.
HuaweiCloud'sdatacenters(DCs)aredistributedacrossvariousglobalregions,suchasEuropeandAsia.EnablingCTSbyregionmakesapplicationsmoreuser-friendlyandensurestheycomplywithlocallawsandregulations.
AprojectcorrespondstoaHuaweiCloudregion.Defaultprojectsaredefinedtoisolateresources(includingcomputing,storage,andnetworkresources)acrossregions.Youcancreatesub-projectsinadefaultregionprojecttoisolateresourcesmoreprecisely.
Whichofthefollowingissueshaveyouencountered
Feedback(optional)
Selectatleastonetypeofissue,andenteryourcommentsorsuggestions.
Enteramaximumof500characters.
Foranyfurtherquestions,feelfreetocontactusthroughthechatbot.
ExploreHuaweiCloud
FeaturedServices
ServiceandSupport
AccountandPayment
QuickLinks
2024,HuaweiCloudComputingTechnologiesCo.,Ltd.and/oritsaffiliates.Allrightsreserved.