By using an associated instance of VMware Aria Operations for Logs, you can monitor events triggered by your Organization users as a result of activity with user logins, user management, API Tokens, OAuth Applications, and billing.

VMware Aria Operations for Logs is a VMware Cloud service and you need a paid or trial subscription to use it. For information about different subscription options, see VMware Aria Operations for Logs (SaaS) Subscription and Billing.

By using the VMware Aria Operations for Logs service, you get a wide range of auditing capabilities such as log filtering, archiving and forwarding. You access audit data for your Organization by starting the VMware Aria Operations for Logs service in the Cloud Services Console. This way, you open the Audit Events for VMware Cloud Services dashboard where you see a visual overview of the events in your Organization. If the dashboard is not activated by default, select it for viewing from the Content Pack Dashboards tab of the Dashboards page.

For more information on using VMware Aria Operations for Logs refer to Using VMware Aria Operations for Logs (SaaS).

Note: If your Organization does not have a VMware Aria Operations for Logs service subscription and you still want to view VMware Cloud services log events for the present or past period, as a workaround you obtain an audit report by filing a support ticket. You receive the report for the specified time period in an encrypted CSV file by email within 48 hours of creating your support request.

Who can view audit data in VMware Aria Operations for Logs

All users in the Organization with a VMware Aria Operations for Logs User or a VMware Aria Operations for Logs Admin service role can access all audit data for your Organization in the associated VMware Aria Operations for Logs service instance.