Bastionhost allows you to archive audit logs in Log Service. The audit logs record all O&M activities. After you configure the archiving settings for audit logs, Bastionhost automatically delivers the audit logs to Log Service. This topic describes how to archive audit logs in Log Service.

Background information

Audit logs record the O&M activities that O&M engineers perform by using Bastionhost. Bastionhost stores audit logs only for 180 days. If you want to store audit logs longer than 180 days, you can archive the audit logs in Log Service. In the Log Service console, you can customize the log retention period. In addition, you can query and analyze the audit logs. For more information, see Log search overview and Log analysis overview.

Note The archiving operation does not affect the audit logs that are stored in Bastionhost. You can still view these audit logs on the Session Audit page of the Bastionhost console. For more information, see Search for sessions and view session details.

Procedure

  1. Log on to the Log Service console.
  2. Activate Log Service as required.
  3. In the Log Application section, click Log Audit Service.
  4. On the Global Configurations tab, complete the settings for collecting audit logs.
    1. In the Region of the Central Project drop-down list, select the region of the project in which you want to centrally store the collected logs.
    2. Authorize Log Service to collect and synchronize logs.
      You can select manual authorization or AccessKey pair-based authorization.
    3. Find Bastion Host in the Cloud Products column, turn on Operations Log, and then specify a retention period for audit logs in the Storage Type column. Audit configuration
  5. View audit logs.
    1. On the left-side navigation sidebar, click the Audit Query icon.
    2. In the left-side navigation pane, click Bastionhost under Central.
    3. View the audit logs on the Bastion Host tab.
      For more information about the fields of operation logs in Bastionhost, see Bastionhost.