Managing Trails

Users can view activity logs through the Samsung Cloud Platform Console and store those logs using the Trail service without time restrictions. Since activity logs are retained for 90 days, for long-term retention you must create a Trail service and store them in Object Storage.

Create Trail

In the Samsung Cloud Platform Console, you can use the Logging&Audit Trail service to store activity logs without any time restrictions.

To create a Trail, follow the steps below.

1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. On the Trail List page, click the Create Trail button. You will be taken to the Create Trail page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required status	Detailed description
     Trail name	Required	Trail name Enter using English letters, numbers, and the special character (-) with a length of 5 to 26 characters
     Target region	Required	Region where activity occurred Services that are created without specifying a region select the target region as All If a specific region selection is required, select from the region list The target region can be changed after creation
     Target resource type	Required	Resource type of activity logs to be stored in Trail Default: All If you want to change to specify only certain resource types, click the Select button to choose the resource types to store Refer to the Service-specific resource type list for selectable resource types The target resource type can be changed after creation
     Target users	Required	User of the activity records to be stored in Trail Default: All If you want to change to specify only certain users, click the Select button to choose the users to be saved The target users can be modified after creation
     Storage bucket region	Required	Location (region) of the Object Storage bucket for storing activity logs The storage bucket cannot be changed after creation
     storage bucket	Required	Object Stroage bucket name for storing activity logs The storage bucket cannot be changed after creation
     Save format	Required	File type to save (JSON, CSV) The save format can be changed after creation
     Log file verification	Select	Log file verification usage If you select Use, a Digest file is stored in the same bucket to verify changes or deletions of the Trail log file Log file verification usage can be changed after creation
     ServiceWatch log collection	Select	Trail logs are sent to a ServiceWatch log group. By sending Trail logs to a ServiceWatch log group, you can monitor them through ServiceWatch and receive alerts when specific activities occur If you select Use, you can view the automatically generated ServiceWatch log group name. You can also select the IAM role required for ServiceWatch log collection The IAM role for ServiceWatch log collection requires the following configuration Set the Principal’s Type to Service, and choose loggingaudit.samsungsdscloud.com for Value Attach a policy to Policy that includes the following permissions servicewatch:CreateBulkServiceLogEvents servicewatch:CollectLogGroupLogStream Whether ServiceWatch log collection is enabled can be changed after the Trail is created

     Table. Trail service information input fields
   • In the Additional Information Input area, enter or select the required information.

     Category	Required	Detailed description
     description	Select	Enter additional information or description about the Trail
     Tag	Selection	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key and Value values

     Table. Trail additional information input fields

{
	"Statement": [
		{
			"Action": [
				"servicewatch:CreateBulkServiceLogEvents",
				"servicewatch:CollectLogGroupLogStream"
			],
			"Effect": "Allow",
			"Resource": [
				"*"
			],
			"Sid": "VisualEditor0"
		}
	],
	"Version": "2024-07-01"
}

{
	"Statement": [
		{
			"Action": [
				"servicewatch:CreateBulkServiceLogEvents",
				"servicewatch:CollectLogGroupLogStream"
			],
			"Effect": "Allow",
			"Resource": [
				"*"
			],
			"Sid": "VisualEditor0",
            "Condition": {
                "Bool": {
                        "scp:MultiFactorAuthPresent": [
                            "True"
                    ]
                }
            }
		}
	],
    "Version": "2024-07-01"
}

4. Summary Check the detailed information and estimated billing amount generated in the panel, then click the Complete button.
   • Once creation is complete, check the created resources on the Trail List page.

Check Trail detailed information

The Trail service allows you to view and edit the full list and detailed information. Trail Details page consists of Details, Tags, Activity Log tabs.

To view detailed information about the Trail, follow these steps.

1. Click the All Services > Management > Logging&Audit menu. Navigate to the Service Home page of Logging&Audit.
2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. Trail List page, click the resource to view detailed information. You will be taken to the Trail Detail page.
   • Trail Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.

     Category	Detailed description
     Trail status	Status of the user-created Trail Active: Trail running Stopped: Trail stopped
     Trail control	Button to change the Trail status Start: Starts a stopped Trail. Activity logs are saved again from the day the Trail is started. Stop: Stops a running Trail. Activity logging is halted, and previously saved activity logs are retained.
     Delete Trail	Button to delete the trail

     Table. Trail status information and additional features

Detailed Information

On the Trail list page, you can view detailed information of the selected resource and edit the information if needed.

tag

On the Trail List page, you can view the tag information of the selected resource, and add, modify, or delete it.

Job History

On the Trail list page, you can view the operation history of the selected resource.

Managing Trail Resources

Depending on the Trail’s state, you can start or stop it. To control the Trail’s resources, follow the steps below.

Getting Started with Trail

You can start a Stopped Trail. Activity history will be saved again from the day you start the Trail.

1. Click the All Services > Management > Logging&Audit menu. You will be taken to the Service Home page of Logging&Audit.
2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. On the Trail List page, click the resource (Trail) to restart the stopped Trail. You will be taken to the Trail Details page.
4. On the Trail Details page, click the Start button at the top to start the server. Check the status of the changed Trail in the Status Display item.
   • When the Trail start is complete, the status changes from Stopped to Active.
   • For detailed information about the Trail status, please refer to Check Trail details.

Stop Trail

You can stop a Trail that is active. Stopping a Trail halts the recording of activity history, while preserving any previously saved activity history.

1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. Trail List page, click the resource (Trail) you want to stop. You will be taken to the Trail Details page.
4. Trail Details page, click the Stop button at the top to stop the server. In the Status Display section, check the status of the updated Trail.
   • When the trail stop is complete, the status changes from Active to Stopped.
   • For detailed information about the Trail status, refer to Check Trail detailed information.

Managing Trail Resources

If you need control and management functions for the created Trail resource, you can perform tasks on the Trail Details page.

Modify target region

You can modify the target region of a Trail. To modify the target region of a Trail, follow the steps below.

1. Click the All Services > Management > Logging&Audit menu. Navigate to the Service Home page of Logging&Audit.
2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. On the Trail List page, click the resource (Trail) whose target region you want to change. You will be taken to the Trail Details page.
4. On the Trail Details page, click the Edit button of the Target Region. You will be taken to the Edit Target Region popup.
5. Select the region to modify from the region list, and click the Confirm button. You will be taken to the Trail Details page.
6. Check the changed target region on the Trail Details page.

Edit target resource type

You can modify the target resource type of a Trail. To modify the target resource type of a Trail, follow the steps below.

1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
2. Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. On the Trail List page, click the resource (Trail) whose target resource type you want to change. You will be taken to the Trail Details page.
4. On the Trail Details page, click the Edit button of the Target Resource Type. You will be taken to the Edit Target Resource Type popup.
5. Add or modify the target resource type, select it, and verify that the selected resource type appears in the selected item at the bottom.
   • Refer to the Service-specific resource type list for selectable resource types.
6. If you have completed adding or modifying the target resource type, click the Confirm button. You will be taken to the Trail Details page.
7. On the Trail Detail page, check the changed Target Resource Type.

Edit target user

You can modify the target users of a Trail. To modify the target users of a Trail, follow these steps.

1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. Trail List page, click the resource (Trail) whose target user you want to change. You will be taken to the Trail Details page.
4. On the Trail Details page, click the Edit button of the Target User. The Target User Edit popup opens.
5. Add or modify the target user, select them, and verify that the selected user appears in the Selection Item at the bottom.
6. If you have completed adding or modifying the target user, click the Confirm button. You will be taken to the Trail Details page.
7. On the Trail Details page, check the changed Target Users.

Modify Save Format

You can modify the format of log files stored in Trail’s bucket. To change Trail’s storage format, follow these steps.

1. Click the All Services > Management > Logging&Audit menu. You will be taken to the Service Home page of Logging&Audit.
2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. Trail List page, click the resource (Trail) whose log file storage format you want to change. You will be taken to the Trail Details page.
4. On the Trail Details page, click the Edit button of the Save Format. The Edit Save Format popup window opens.
5. Change the file format and click the Confirm button. You will be taken to the Trail Details page.
6. On the Trail Detail page, check the changed Save Format.

Edit Trail description

You can edit the description of a Trail. To edit the description of a Trail, follow these steps.

1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. Trail List page, click the resource (Trail) whose description you want to edit. You will be taken to the Trail Detail page.
4. Click the Edit button of the Description on the Trail Details page. The Edit Description popup opens.
5. Complete editing the description and click the Confirm button. You will be taken to the Trail Details page.
6. Check the updated description on the Trail Detail page.

Modify log file verification

You can modify whether Trail’s log file verification is enabled. To modify the usage of Trail’s log file verification, follow the steps below.

1. Click the All Services > Management > Logging&Audit menu. Navigate to the Service Home page of Logging&Audit.
2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. Click the resource (Trail) whose log file verification setting you want to change on the Trail List page. You will be taken to the Trail Details page.
4. Click the Edit button of Log File Verification on the Trail Details page. You will be taken to the Log File Verification Edit popup.
5. If you select Use, a Digest file is stored in the same bucket to verify whether the Trail log file has been modified or deleted. Choose whether to use it and click the Confirm button. You will be taken to the Trail Details page.
6. On the Trail Details page, check the updated log file verification.

Modify ServiceWatch Log Collection

You can modify whether ServiceWatch log collection is enabled. To modify the ServiceWatch log collection setting for a Trail, follow these steps.

1. Click the All Services > Management > Logging&Audit menu. Proceed to the Service Home page of Logging&Audit.
2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. On the Trail List page, click the resource (Trail) to change the ServiceWatch log collection setting. You will be taken to the Trail Details page.
4. On the Trail Details page, click the Edit button of ServiceWatch log collection. You will be taken to the Edit ServiceWatch log collection popup.
5. When you select Use, the ServiceWatch log group name that will receive the Trail logs is automatically generated and can be viewed. Also select the IAM role required for ServiceWatch log collection, and click the Confirm button. You will be taken to the Trail Details page.
   • ServiceWatch log collection requires the following configuration for the IAM role.
     • Select Service for the Category of Actor, and select loggingaudit.samsungsdscloud.com for Value.
     • In the policy, link a policy configured with the following permissions.

       • servicewatch:CreateBulkServiceLogEvents

       • servicewatch:CollectLogGroupLogStream

       • To create the authentication type as all authentication, write it as follows.

         • Tab 0

         Sample Code Download

         Copy Code

         Color mode

         {
         	"Statement": [
         		{
         			"Action": [
         				servicewatch:CreateBulkServiceLogEvents
         				servicewatch:CollectLogGroupLogStream
         			],
         			"Effect": "Allow"
         			"Resource": [
         				*
         			],
         			"Sid": "VisualEditor0"
         		}
         	],
         	"Version": "2024-07-01"
         }

         {
         	"Statement": [
         		{
         			"Action": [
         				servicewatch:CreateBulkServiceLogEvents
         				servicewatch:CollectLogGroupLogStream
         			],
         			"Effect": "Allow"
         			"Resource": [
         				*
         			],
         			"Sid": "VisualEditor0"
         		}
         	],
         	"Version": "2024-07-01"
         }

       • If you want to create the authentication type as temporary authentication, Console login, you need a Condition clause as shown below.

         • Tab 0

         Sample Code Download

         Copy Code

         Color mode

         {
         	"Statement": [
         		{
         			"Action": [
         				servicewatch:CreateBulkServiceLogEvents
         				servicewatch:CollectLogGroupLogStream
         			],
         			"Effect": "Allow"
         			"Resource": [
         				*
         			],
         			"Sid": "VisualEditor0"
                     "Condition": {
                         "Bool": {
                                 "scp:MultiFactorAuthPresent": [
                                     True
                             ]
                         }
                     }
         		}
         	],
             "Version": "2024-07-01"
         }

         {
         	"Statement": [
         		{
         			"Action": [
         				servicewatch:CreateBulkServiceLogEvents
         				servicewatch:CollectLogGroupLogStream
         			],
         			"Effect": "Allow"
         			"Resource": [
         				*
         			],
         			"Sid": "VisualEditor0"
                     "Condition": {
                         "Bool": {
                                 "scp:MultiFactorAuthPresent": [
                                     True
                             ]
                         }
                     }
         		}
         	],
             "Version": "2024-07-01"
         }

6. Check the updated ServiceWatch log collection on the Trail Details page.

Delete Trail

You can reduce operational costs by deleting unused Trails. However, deleting a Trail may cause the running service to stop immediately, so you should carefully consider the impact of service interruption before proceeding with the termination.

To delete a Trail, follow these steps.

1. Click the All Services > Management > Logging&Audit menu. Navigate to the Service Home page of Logging&Audit.
2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
3. Trail List page, click the resource (Trail) you want to delete. You will be taken to the Trail Details page.
4. On the Trail Details page, click the Trail Delete button.
5. After deletion is complete, check the Trail list page to confirm the resource has been removed.

List of resource types by service

Resource type list per service. When creating a Trail or modifying the target resource type, this is the list of selectable target resource types.