If you use five or more ECS instances, use Simple Log Service (SLS) to centrally collect business logs and monitor for anomalies.
Scenarios
When you have five or more ECS instances, you can use SLS to centrally collect business logs from all servers.
Threat level
Default threat level: Low.
You can change the risk level as needed.
Detection logic
This rule checks whether you use SLS to centrally collect business logs and monitor for anomalies when you have five or more ECS instances.
Rule details
Parameter | Description |
Rule name | Use Simple Log Service to centrally collect and monitor business logs |
Rule identifier | |
Automatic remediation | Not supported |
Rule trigger | 24-hour epoch |
Supported resource types | ACS::::Account |
Input parameters | None |