Alibaba Cloud Service Mesh:Enable control-plane log collection and log-based alerting in an ASM instance of version 1.17.2.35 or later

Enable control-plane log collection

1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose Observability Management Center > Log Center.

3. On the Log Center page, click the Control-Plane Logs tab. Then, select New project or Use existed project, configure the parameters, and then click Enable Control-Plane Log Collection. In the Submit message, click OK.

   After logs are collected to Simple Log Service, you can perform the following operations:

   • View control-plane logs in the console. For more information, see View control-plane logs.

   • Enable log-based alerts to detect issues on the control plane in a timely manner. For more information, see Configure log-based alerting for the control plane.

View control-plane logs

After you enable control-plane log collection, logs of control-plane components of the ASM instance are collected to Simple Log Service. You can view or retrieve control-plane logs in the Simple Log Service console or on the log browsing interface that is integrated into the ASM console.

Configure log-based alerting for the control plane

After you enable control-plane log collection, you can configure log-based alerting for the control plane.

1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose Observability Management Center > Log Center.

3. On the Log Center page, click the Control-Plane Logs tab. In the upper-left corner, click Alert Setting.

4. In the Control-Plane Alert Setting dialog box, find the desired alert policy, select an action policy based on your business requirements, and click Enable Alert. In the Note message, click OK.

   An action policy describes how alert notifications are sent when an alert is triggered. ASM Built-in Action Strategy and Custom action strategy are supported. By default, no notification channels are configured for a built-in action policy of ASM. You can click the icon to go to the alert center of Simple Log Service to set a notification channel. If an alert is triggered, handle the alert by referring to Handle alerts.

Configure alert contacts

You can configure built-in action policies for gateways, alert contacts, and notification templates in Simple Log Service.

1. Log on to the Simple Log Service console.

2. In the Projects section, click the name of the desired project. In the left-side navigation pane, click Alerts.

3. On the Alert Center page, choose Notification Objects > User Group Management.

4. On the User Group Management tab, find sls.app.asm.builtin and click Edit in the Actions column.

5. In the Edit User Group dialog box, select the members that you want to add, click the icon to add the members to the user group, and then click OK.

Verify the alert notification settings

1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose ASM Gateways > Gateway. On the page that appears, click Create from YAML.

3. On the Create page, select a namespace and a template, configure a YAML file, and then click Create.

   In this example, the default namespace is used to configure an Istio gateway. Sample YAML code:

   apiVersion: networking.istio.io/v1beta1
   kind: Gateway
   metadata:
     name:  gateway-test
     namespace: default
   spec:
     selector:
       istio: ingressgateway
     servers:
       - hosts:
           - '*console.aliyun.com'
         port:
           name: https
           number: 443
           protocol: HTTPS
         tls:
           credentialName: not-existing-credential
           mode: SIMPLE

4. View alert notifications.

   1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

   2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose Observability Management Center > Log Center.

   3. On the Log Center page, click Control-Plane Logs and search for ACK ERROR to view the alert information.

      If you have configured email notifications for alerts, you can view alert information by checking your emails.

Handle alerts