Learn about logs generated by OVHcloud KMS and how they are managed from Logs Data Platform.
Requirements
- An OVHcloud customer account
- An OVHcloud KMS ordered, and an access certificate created
- A Logs Data Platform service with at least one data stream created
Instructions
Description
OVHcloud KMS has a native integration with Logs Data Platform for logs management.
Logs direct access
From the OVHcloud Control Panel, navigate to your Key Management Service via the Identity, Security & Operations menu.
Once there, click the Logs tab.
This tab displays all KMS logs in real time. A selector allows you to switch the display between the two types of logs:
- REST API audit logs.
- KMIP audit logs.
Logs access through LDP
From the Logs tab, you can Subscribe to an LDP data stream. Once the subscription is enabled, all the logs will be pushed to Logs Data Platform to archive generated logs and perform advanced searches, and create alerts or visualizations.
For more information, please refer to our Quick Start for Logs Data Platform guide.
Available logs details
KMS logs contain the following information:
-
REST API
Logs are displayed with this format:
Example:
Elements that can be pushed to Logs Data Platform:
Field Description domain_id OKMS domain ID request_id request ID type log_level Log priority level client_ip IP of the client making the request tls_cert_id Authentication certificate ID used res_urn target resource URN region OKMS domain region iam_operation IAM action evalutated iam_identities IAM identity used for rights evaluation http_path Request path http_status HTTP answer status http_method Request method err_category Error category
-
KMIP
Logs are displayed with this format:
Example:
Elements that can be pushed to Logs Data Platform:
Field Description domain_id OKMS domain ID request_id Request ID log_level Log priority level client_ip IP of the client making the request tls_cert_id Authentication certificate ID used res_urn Target resource URN region OKMS domain region iam_operation IAM action evalutated iam_identities IAM identity used for rights evaluation kmip_operation KMIP operation used kmip_reason Standard KMIP error code
Go further
For more information and tutorials, please see our other Manage & Operate support guides or explore the guides for other OVHcloud products and services.