Client logs record operations of regular users, such as logons to cloud desktops, startups of cloud desktops, and shutdowns of cloud desktops. You can query the operation logs to check whether potential exceptions exist.

Background information

To improve security, you can query and audit the operation logs of users. Operation logs are recorded for the following operations: starting, stopping, and restarting cloud desktops, establishing and closing sessions, sending connection requests, and logging on to cloud desktops.


  1. Log on to the EDS console.
  2. In the top navigation bar, select a region.
  3. In the left-side navigation pane, click Operations Logs.
  4. Query and audit operation records.
    By default, the operation records for the previous day (24 hours before the current time) are displayed. Select a query type and enter the keyword, or select a time range. Then, click the Query icon.
    Each operation record includes the following information:
    • Event information: the information about an event, including the event ID, event type, occurrence time, bytes sent, bytes received, and status.
    • User information: the information about the user who performs the operation, including information about the Alibaba Cloud account and the logon user.
    • Desktop and client information: the information about the client and the cloud desktop, including the desktop ID, desktop IP address, workspace ID, client operating system, client version, and client IP address.