检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
CBH helps you comply with security regulations and laws, such as Cybersecurity Law, and audit requirements in different standards, including the following: Technical audit requirements in Sarbanes-Oxley Act and DJCP (or MLPS) Technical audit requirements stated by the financial supervision
You can transfer files and audit transferred files in a CBH system. The file transfer methods on Linux and Windows hosts are different.
Choose Audit > Operation Report. Click Export in the upper right corner of the page. In the displayed Export dialog box, configure the method and time to export the report and the report format.
Choose Audit > System Report. Click Export in the upper right corner of the page. In the displayed Export dialog box, configure the method and time to export the report and the report format.
Configuring the Syslog Server for Remote Backup To enhance data disaster recovery management and improve audit data security and system scalability, you can back up configuration logs for your bastion host.
It provides account, authorization, authentication, and audit management services. API Calling CBH supports Representational State Transfer (REST) APIs, allowing you to call APIs using HTTPS. For more information, see Calling APIs.
Backing Up Audit Logs CBH does not support migration of history audit logs. You need to back up system audit logs before the change.
Creating a Local Data Backup To enhance data disaster recovery management and improve audit data security and system scalability, you can back up configuration logs for your bastion host. This topic walks you through how to create a backup locally.
In the host operation module, you can audit database operations, such as adding, deleting, modifying, and querying database operations. In the application operation module, you can audit operation sessions through videos.
Choose Audit > System Report. Click each statistics tab and view the details. UserControl Stat This area displays the number of disabling and enabling users. By default, the statistics of the current day is displayed.
Configuring an FTP/SFTP Server for Remote Log Backup To enhance data disaster recovery management and improve audit data security and system scalability, you can back up configuration logs for your bastion host.
Configuring OBS Buckets for Remote Log Backup To enhance data disaster recovery management and improve audit data security and system scalability, you can back up configuration logs for your bastion host.
Operation Audit In a CBH system, each system user has a unique identifier.
CBH supports manual backup and automated backup to enhance audit data security, system scalability, and data discovery management. For details, see Manual Backup and Automated Backup.
You can use the logs to perform security analysis, track resource changes, audit compliance, and locate faults. After CTS is enabled, the system starts to record CBH operations. You can view operation records generated in the latest seven days on the CTS console.
Viewing Operation Reports As the audit administrator, you can view and export operation details reports.
Instance Configuration Overview System configuration includes security, network, port, outgoing, authentication, ticket, alarm, audit, and HA backup.
Choose Audit > History Session.
For example, after a system user logs in to a bastion host and performs operations such as permission configuration and audit management, you, the audit administrator, will receive system log records. You can query login and operation log details to audit system logs online.
Audit logs of sessions can be viewed online, recorded and played online, and played offline after being downloaded.
