# Cluster Audit Logs

## 1. Inquiry Log

Logging - Cluster Audit Logs - Select a cluster from the list of clusters to view.

<figure><img src="https://4196990571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FL5As9l8R3RbLkQd6XsfL%2Fuploads%2F86VohMlkcNah28F8MP2G%2Fimage.png?alt=media&#x26;token=50d7371f-dbcf-45bb-ae5a-e1d893bc447e" alt=""><figcaption></figcaption></figure>

**`View By Hour`** : You can search logs from the last 5 minutes to 48 hours ago, and check logs from up to 2 weeks ago.

**`Cluster`**: You can view the entire list of clusters.

**`View More`** : Get logs since the last time in the list.

**`Current number of logs`** **`/`** **`Total number of logs`** : This refers to the total number of logs viewed at that time and the maximum number of logs.

{% hint style="info" %}
The maximum number of logs that can be viewed at one time is 5000. The inquiry period is up to 7 days.
{% endhint %}

{% hint style="info" %}
The Show More button is displayed when the total number of logs exceeds 5000.
{% endhint %}

## 2. View log details

Click the link button for the log viewed by time to check detailed information about the log.

<figure><img src="https://4196990571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FL5As9l8R3RbLkQd6XsfL%2Fuploads%2FaOzHqt5sWgrFLJJGSjeM%2Fimage.png?alt=media&#x26;token=b3ca8173-4dfc-4ada-979a-d363628f6145" alt=""><figcaption></figcaption></figure>

<figure><img src="https://4196990571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FL5As9l8R3RbLkQd6XsfL%2Fuploads%2FoqZOYmdI6MKLjsskVTTI%2Fimage.png?alt=media&#x26;token=e9b227aa-563c-4370-9881-1228c6fd19cb" alt=""><figcaption></figcaption></figure>

**`User Account`** : This refers to the account name of the cluster.

**`Timestamp`** :  This refers to the time when the audit log occurred.

**`Source IP`** : This refers to the IP of the user who generated the audit log.

**`Request URL`** : Refers to the URL for the action in which the audit log occurred.

**`Request Time`** : This refers to the time the task started.

**`Response time`** : refers to the time the task was completed.

**`Response status`** : refers to the result of the action.

**`Verb`** : It means what action the task performed. (eg. create, delete, patch)

* `None` - Events corresponding to this rule are not logged.
* `Metadata` - Logs request metadata (requesting user, timestamp, resource, verb, etc.), but does not log request/response body.
* `Request` - Logs event metadata and request body, but does not log response body. It does not apply to requests other than resources.
* `RequestResponse` - Logs event metadata and request/response body. It does not apply to requests other than resources.

**`Stage`**: Refers to the process or stage in which work was performed.

## 3.  View logs by time

If you click on each graph once, you can check the log for that time, and **if you click again**, you can check the log for the entire time again.

<figure><img src="https://4196990571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FL5As9l8R3RbLkQd6XsfL%2Fuploads%2FHS6QfaexuArKJiV6c1Zx%2Fimage.png?alt=media&#x26;token=8139d314-341a-40a6-8adf-b11a233a03dd" alt=""><figcaption></figcaption></figure>

**`그래프 클릭`** : 현재 시간의 로그가 8,704개인것을 확인할 수 있습니다.

## 4. Inquiry Label

Click the arrow button on the right to see the set of labels for the logs present at that time.

<figure><img src="https://4196990571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FL5As9l8R3RbLkQd6XsfL%2Fuploads%2F8XY99R8QoitxHn4Bo4Du%2Fimage.png?alt=media&#x26;token=6f978ecb-87bb-4ead-bda1-0eba7a5f55b2" alt=""><figcaption></figcaption></figure>

<figure><img src="https://4196990571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FL5As9l8R3RbLkQd6XsfL%2Fuploads%2F0Heb7uALEOEY6gjh6Gwc%2Fimage.png?alt=media&#x26;token=36fa7f0e-3535-4940-9930-bedff82bebb0" alt=""><figcaption></figcaption></figure>

**`label list key`** : Indicates a list of labels for viewed logs. You can check the label value by clicking the label button.

**`label list values`** : Click the label value to search for the log you want to find by adding the conditions you want to search through AND search.

**`Selected label value`** : When you add a label condition, the condition is added to the top of the graph, and you can search by clicking the X button to remove the condition.

## 5. Search Log

Enter the keyword you want to search for and click the search button to view the log for the search term.

<figure><img src="https://4196990571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FL5As9l8R3RbLkQd6XsfL%2Fuploads%2F5sGb9XaK4N1PEKxegm9n%2Fimage.png?alt=media&#x26;token=2d8b4c31-9eff-4221-b35c-67bb72fcb9d2" alt=""><figcaption></figcaption></figure>

**`Search word`** : You can search logs where the string exists regardless of case.

## 6. Download Log

Click the “Download” button at the top of the graph to download the log.

<figure><img src="https://4196990571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FL5As9l8R3RbLkQd6XsfL%2Fuploads%2FpgyWeD9zmuHAxzBDY5wv%2Fimage.png?alt=media&#x26;token=375a9af3-358a-45cd-9869-e73187084409" alt=""><figcaption></figcaption></figure>

**`Download`**: You can download log data for up to 5,000 searched logs in Excel file format. Each column contains a label value


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://cocktailcloud.gitbook.io/cocktail-cloud-online-en/log-service/cluster-audit-logs.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
