Agent Security Center:Agent Loop

What is Agent Loop

Agent Loop is the log analysis module of Agent Security Center. It comprehensively records and traces agent runtime behavior, network communications, and security events, providing end-to-end log collection and analysis capabilities from runtime behavior to security events for enterprise AI agents, meeting compliance audit and security operations requirements. Key capabilities:

• Trace agent call chains, covering the complete chain of LLM (Large Language Model) calls and tool calling.

• View agent runtime overview, including agent count, Trace count, model call composition, and tool duration distribution.

• Query and analyze various logs using SQL-like statements, with support for statistical charts, intelligent patrol inspection, and log clustering views.

• Investigate security alerts and risk events, and retain audit evidence.

Prerequisites

• The current account has completed identity verification and has no overdue payments.

• The Purchase and unsubscribe from Agent Security Center is completed.

Enable Agent Loop

1. Go to the Agent Security Center - Agent Loop, in the upper-left corner of the page, select the region where the assets to be protected are located: Chinese Mainland or Outside Chinese Mainland.

2. On the Agent Loop page, click Configure Now.

3. In the configuration dialog, configure the log storage region and retention period for each log type.

   • Select Storage Region: Storage regions are grouped into Chinese mainland and outside the Chinese mainland. Select the region closest to your workload deployment for optimal performance. For supported regions, see Supported regions.

   • Log delivery scope: Log types are enabled by default. You can disable log types that are not required.

   • Configure Log Retention Period: The default retention period is 180 days, and the minimum is 7 days. Expired data is automatically deleted.

4. After configuration, click OK to complete the configuration.

5. After configuration, the system automatically creates a log project in the format aliyun-aisc-log-${uid}-${regionId}. You can go to the Simple Log Service console to view the corresponding data.

   Note

   For the LogStore corresponding to each log type, see Log types.

   • ${uid}: Your Alibaba Cloud account ID.

   • ${regionId}: The selected storage region ID.

Modify log delivery scope and retention period

After the log analysis space is created, you can change the delivery scope or data retention period at any time.

1. On the Agent Loop Log Details tab, click Log Delivery Settings in the upper-right corner of the page.

2. On the Log Delivery Settings page, you can perform the following operations:

   • Modify log delivery scope: In the Log Storage Management area, turn the delivery switch on or off.

     Important

     Turning off all log delivery switches only stops receiving new logs. Stored logs still incur storage fees. To completely disable the feature, go to the Simple Log Service console and delete the corresponding log project.

     • Modifying the delivery scope does not affect stored historical data.

     • After delivery is disabled, the log type stops collecting new data, but existing data is retained until it expires and is automatically deleted.

   • Modify data retention period:

     1. In the Log Storage Management area, in the target log row, click the icon after the data retention time.

     2. In the modification dialog, modify the storage time and click Confirm.

     Note

     The retention period must be between 7 and 3650 days. Changes take effect immediately.

View and analyze logs

Cross-region migration

When your business deployment location changes, you can migrate log storage to another region.

Billing

Agent Loop uses the pay-as-you-go billing model. You are charged based on actual usage, and bills are delivered on the following day (T+1).

• Billing unit: Billed by storage capacity per hour. Storage under 1 TB in a given hour is billed as 1 TB.

• Metering: Storage is archived every hour. Hourly measurements accumulate throughout the day, and the bill for that day is pushed the next day (T+1).

  Example: If your storage is stable at 3 TB for the entire day, the daily measurement is 24 hours × 3 TB = 72 TB·hours, and the daily fee is USD 21.6 (72 TB·hours × USD 0.3/TB/hour).

• Pricing: USD 0.3/TB/hour.

Overdue payments and unsubscription