Log Service is a cloud-native observation and analysis platform that provides large-scale, low-cost, and real-time services to process multiple types of data such as logs, metrics, and traces. Log Service allows you to collect, transform, query, analyze, visualize, ship, and consume data. You can also configure alerts in the console. Log Service helps enterprises improve their digital capabilities in terms of R&D, O&M, and data security.

Learning path

Log Service learning path provides common guides to use Log Service. For more information, see Log Service Learning Path. Log Service learning path also provides videos that match the user guides to help you understand Log Service.


Before you use Log Service, familiarize yourself with the following terms.

Term Description
Project A project in Log Service is used to separate different resources of multiple users and control access to specific resources. For more information, see Project.
Logstore A Logstore in Log Service is used to collect, store, and query log data. For more information, see Logstore.
Metricstore A Metricstore in Log Service is used to collect, store, and query time series data. For more information, see Metricstore.
Log Logs are records of changes that occur in a system during the running of the system. The records contain information about the operations that are performed on specific objects and the results of the operations. The records are ordered by time. For more information, see Log.
Log group A log group is a collection of logs and is the basic unit that is used to write and read logs. The logs in a log group contain the same metadata, such as the IP address and log source. For more information, see Log group.
Time series data Time series data is a series of data points that are ordered by time. For more information, see Time series data.
Trace data Trace data indicates the execution process of an event or a procedure in a distributed system. For more information, see Trace.
Shard A shard is used to control the read and write capacity of a Logstore. In Log Service, data is stored in a shard. Each shard has an MD5 hash range and each range is a left-closed and right-open interval. Each range does not overlap with the ranges of other shards. The entire MD5 hash range is within the following range: [00000000000000000000000000000000, ffffffffffffffffffffffffffffffff). For more information, see Shard.
Topic A topic is a basic management unit in Log Service. You can specify log topics when you collect logs. This way, Log Service classifies logs by log topic. For more information, see Topic.
Endpoint An endpoint of Log Service is a URL that is used to access a project. To access projects in different regions, you must use different endpoints. To access the projects in the same region over the Alibaba Cloud internal network or the Internet, you must also use different endpoints. For more information, see Endpoints.
AccessKey pair An AccessKey pair is an identity credential that consists of an AccessKey ID and an AccessKey secret. The AccessKey ID and the AccessKey secret are used for symmetric encryption and identity verification. The AccessKey ID is used to identify a user. The AccessKey secret is used to encrypt and verify a signature string. The AccessKey secret is confidential. For more information, see AccessKey pair.
Region The region is the physical location where a data center of Log Service is located. You can specify a region when you create a project. After the project is created, you cannot change the region.


Log Service provides the following features to meet the requirements of cloud-native observation and analysis in multiple business scenarios.

  • Data collection
    You can collect log data, trace data, or metric data from more than 50 types of data sources. These data sources include cloud services, servers, applications, IoT devices, mobile terminals, and open source software. You can also collect data that is transferred over standard protocols.
  • Data transformation
    Log Service provides about 200 built-in functions, 400 regular expressions, and flexible custom functions to filter, split, convert, enrich, and replicate data. This feature meets your requirements for multiple scenarios, such as data dispatching, standardization, and integration.
  • Query and analysis
    Log Service allows you to query and analyze petabytes of data in real time. This feature supports more than 10 operators, more than 10 machine learning functions, and more than 100 SQL functions. This features also supports scheduled SQL jobs and dedicated SQL instances.
  • Visualization
    Log Service allows you to visualize query and analysis results. Log Service provides more than 10 types of charts, such as tables, line charts, bar charts, and maps. You can customize dashboards based on charts. You can also perform embedded analysis and drill-down analysis.
  • Alerting
    Log Service provides the integrated alerting feature. This feature includes the alert monitoring, alert management, and notification management systems. The alerting feature is suitable for multiple scenarios such as DevOps, ITOps, AIOps, SecOps, and BizOps.
  • Consumption and shipping
    Log Service allows you to consume data in rela time by using multiple streaming frameworks, such as Storm, Flume, or Flink. You can also ship data to Object Storage Service (OSS), MaxCompute, or Time Series Database (TSDB) in real time.


You can use Log Service by using the following methods.

Method Description
Console Log Service provides a web console to manage your Log Service resources. For more information, see Log Service console.
SDK Log Service provides SDKs for various programming languages to facilitate secondary development. For more information, see SDK overview.
API Log Service provides the API to manage your Log Service resources. This method requires you to sign API requests. For more information, see API overview.
Note We recommend that you use SDKs to avoid signature verification.
CLI Log Service provides a command-line interface (CLI) to manage your Log Service resources. For more information, see Command-line interface.


Log Service supports the pay-as-you-go billing method. You are charged based on your actual usage. Compared with self-managed ELK, Log Service allows you to reduce the total cost by 50%. For more information about metering items and billing items, see Billable items and billing method.

Customer feedback

The following figures show the comments of some Log Service customers.

Chanjet Logo
The O&M and development team of Chanjet uses Log Servcie to prevent frequent false alerts, detect suspicious sites, and identify errors. Log Service helps Chanjet improve the O&M efficiency and reduce the costs of O&M and communication.
miHoYo Logo
Log Service teams up with miHoYo to support the online game named Genshin Impact from the internal test and public preview to the commercial release. Log Service is highly recognized for its performance in helping miHoYo manage logs from tens of millions of players.
Sandbox Logo
Log Service helps Sandbox Network collect and manage data in a unified manner in global business scenarios where services are deployed on multiple clouds. Sandbox Network has increased its troubleshooting efficiency by 30% to meet its rapid business growth.
Sandbox Network

Activate Log Service

Click Activate Log Service to go to the buy page of Log Service.

Activate Log Service