This topic describes the actions that a RAM user can perform on Log Service resources.
Actions that a RAM user can perform on Log Service resources
The following table describes the actions that you can authorize a RAM user to perform on Log Service resources.
Action | Description |
---|---|
log:CreateProject | Creates a project. |
log:GetLogStoreLogs | Queries logs in a Logstore of a specified project. |
log:GetLogStoreHistogram | Queries the distribution of logs in a Logstore of a specified project. |
log:GetLogStore | Queries the attributes of a Logstore. |
log:ListLogStores | Lists all Logstores in a specified project. |
log:CreateLogStore | Creates a Logstore in a project. |
log:DeleteLogStore | Deletes a Logstore, including all shards and indexes of the Logstore. |
log:UpdateLogStore | Updates the attributes of a Logstore. |
log:GetCursorOrData (GetCursor and PullLogs) | Queries a cursor based on the server time. Query logs based on the cursor and quantity. |
log:ListShards | Lists all available shards in a Logstore. |
log:PostLogStoreLogs | Writes logs to a specified Logstore. |
log:CreateConfig | Creates a Logtail configuration file in a project. |
log:UpdateConfig | Updates a Logtail configuration file. |
log:DeleteConfig | Deletes a Logtail configuration file. |
log:GetConfig | Queries the details of a Logtail configuration file. |
log:ListConfig | Lists all Logtail configuration files in a project. You can paginate the files by setting the parameters. |
log:CreateMachineGroup | Creates a machine group to specify the servers from which logs are collected. |
log:UpdateMachineGroup | Updates a machine group. |
log:DeleteMachineGroup | Deletes a machine group. |
log:GetMachineGroup | Queries the details of a machine group. |
log:ListMachineGroup | Lists the machine groups. |
log:ListMachines | Lists the machines in a machine group. The machines are connected to Log Service. |
log:ApplyConfigToGroup | Applies a Logtail configuration file to a machine group. |
log:RemoveConfigFromGroup | Deletes a Logtail configuration file from a machine group. |
log:GetAppliedMachineGroups | Retrieves the list of machines to which a Logtail configuration file is applied. |
log:GetAppliedConfigs | Retrieves the Logtail configuration files that are applied to a machine group. |
log:GetShipperStatus | Queries the status of LogShipper tasks. |
log:RetryShipperTask | Re-runs the failed LogShipper tasks. |
log:CreateConsumerGroup | Creates a consumer group in a specified Logstore. |
log:UpdateConsumerGroup | Modifies the attributes of a specified consumer group. |
log:DeleteConsumerGroup | Deletes a specified consumer group. |
log:ListConsumerGroup | Lists all consumer groups in a specified Logstore. |
log:UpdateCheckPoint | Updates the checkpoint of a shard in a specified consumer group. |
log:HeartBeat | Sends a heartbeat packet to Log Service for a consumer. |
log:GetCheckPoint | Retrieves the checkpoints of one or all shards in a specified consumer group. |
log:CreateIndex | Creates the indexes for a specified Logstore. |
log:DeleteIndex | Deletes the indexes from a specified Logstore. |
log:GetIndex | Queries the indexes of a specified Logstore. |
log:UpdateIndex | Updates the indexes of a specified Logstore. |
log:CreateSavedSearch | Creates a saved search. |
log:UpdateSavedSearch | Updates a saved search. |
log:GetSavedSearch | Queries a saved search. |
log:DeleteSavedSearch | Deletes a saved search. |
log:ListSavedSearch | Lists the saved searches. |
log:CreateDashboard | Creates a dashboard. |
log:UpdateDashboard | Updates a dashboard. |
log:GetDashboard | Queries a dashboard. |
log:DeleteDashboard | Deletes a dashboard. |
log:ListDashboard | Lists the dashboards. |
log:CreateJob | Creates a task. For example, creates an alert or subscription. |
log:UpdateJob | Updates a task. |
log:CreateApp | Grants a RAM user the permissions to create an application, such as Cost Manager and Log Audit Service. |
log:UpdateApp | Grants a RAM user the permissions to update an application, such as Cost Manager and Log Audit Service. |
log:GetApp | Grants a RAM user the permissions to query an application, such as Cost Manager and Log Audit Service. |
log:DeleteApp | Grants a RAM user the permissions to delete an application, such as Cost Manager and Log Audit Service. |