Log Service can collect logs from multiple types of Alibaba Cloud services, such as elastic computing, storage, security, and database services. The logs record operational statistics, such as user operations, running statuses, and business dynamics of Alibaba Cloud services.

Note Log Service provides the Log Audit Service application that collects logs across accounts from the following Alibaba Cloud services: ActionTrail, Container Service for Kubernetes (ACK), Object Storage Service (OSS), Apsara File Storage NAS (NAS), Server Load Balancer (SLB), Application Load Balancer (ALB), API Gateway, Virtual Private Cloud (VPC), ApsaraDB RDS, PolarDB-X 1.0, PolarDB, Web Application Firewall (WAF), Anti-DDoS, Cloud Firewall, and Security Center. For more information, see Log Audit Service.
The following tables list the Alibaba Cloud services from which Log Service can collect logs. The tables also list the related projects, Logstores, and dashboards that can be created in Log Service.
  • Elastic Computing
    Cloud serviceLogProject and LogstoreDashboard
    Elastic Compute Service (ECS)Full logsCustom.

    The logs are collected by using Logtail. For more information, see Use Logtail to collect logs.

    		Custom
    ACK
    • Kubernetes audit logs
    • Kubernetes event centers
    • Ingress access logs
    		Custom.

    The logs are collected by using Logtail. For more information, see Collect container logs.

    		Custom
    Function ComputeExecution logs
    • Project: aliyun-fc-Region ID-bb47c1e4-cdd4-5318-978e-d748952652c8
    • Logstore: function-log
    		Custom
  • Storage
    Cloud serviceLogProject and LogstoreDashboard
    OSSAccess logs
    • Project: oss-log-Alibaba Cloud account ID-Region ID
    • Logstore: oss-log-store
    • oss-log-store_access_center
    • oss-log-store_audit_center
    • oss-log-store_operation_center
    • oss-log-store_performance_center
    NASAccess logs
    • Project: nas-Alibaba Cloud account ID-Region ID
    • Logstore: nas-nfs
    • nas-nfs-nas_summary_dashboard_cn
    • nas-nfs-nas_audit_dashboard_cn
    • nas-nfs-nas_detail_dashboard_cn
  • Security
    Cloud serviceLogProject and LogstoreDashboard
    Anti-DDoS ProFull logs
    • Anti-DDoS Pro instances in the Chinese mainland
      • Project: ddos-pro-project-Alibaba Cloud account ID-cn-hangzhou
      • Logstore: ddos-pro-logstore
    • Anti-DDoS Pro instances outside the Chinese mainland
      • Project: ddos-pro-Alibaba Cloud account ID-ap-southeast-1
      • Logstore: ddos-pro-logstore
    • DDoS Operation Center
    • DDoS Access Center
    Anti-DDoS Pro and Anti-DDoS PremiumFull logs
    • Anti-DDoS Pro
      • Project: ddoscoo-project-Alibaba Cloud account ID-cn-hangzhou
      • Logstore: ddoscoo-logstore
    • Anti-DDoS Premium
      • Project: ddosdip-project-Alibaba Cloud account ID-ap-southeast-1
      • Logstore: ddosdip-logstore
    • DDoS Operation Center
    • DDoS Access Center
    Anti-DDoS OriginAnti-DDoS Origin logs
    • Project: ddosbgp-project-Alibaba Cloud account ID-cn-hangzhou
    • Logstore: ddosbgp-logstore
    • Anti-DDoS Origin Events Report
    • Anti-DDoS Origin Mitigation Report
    Security Center
    • Security logs
      • Vulnerability logs
      • Baseline logs
      • Alert logs
    • Network logs
      • Domain Name System (DNS) logs
      • Internal DNS logs
      • Network session logs
      • Web access logs
    • Host logs
      • Process startup logs
      • Network connection logs
      • Logon logs
      • Brute-force attack logs
      • Process snapshot logs
      • Account snapshot logs
      • Port snapshot logs
    • Project: sas-log-Alibaba Cloud account ID-Region ID
    • Logstore: sas-log
    • Network logs
      • SAS DNS Access Center
      • SAS Network Session Center
      • SAS Web Access Center
    • Host logs
      • SAS Login Center
      • SAS Process Center
      • SAS Connection Center
    • Security logs
      • SAS Baseline Center
      • SAS Vulnerability Center
      • SAS Alarm Center
    WAF 2.0
    • WAF instances in the Chinese mainland
      • Project: waf-project-Alibaba Cloud account ID-cn-hangzhou
      • Logstore: waf-logstore
    • WAF instances outside the Chinese mainland
      • Project: waf-project-Alibaba Cloud account ID-ap-southeast-1
      • Logstore: waf-logstore
    • WAF Operation Center
    • WAF Access Center
    • WAF Security Center
    WAF 3.0
    • Subscription WAF instances
      • WAF instances in the Chinese mainland
        • Project: wafng-project-Alibaba Cloud account ID-cn-hangzhou
        • Logstore: wafng-logstore
      • WAF instances outside the Chinese mainland
        • Project: wafng-project-Alibaba Cloud account ID-ap-southeast-1
        • Logstore: wafng-logstore
    • Pay-as-you-go WAF instances
      • WAF instances in the Chinese mainland
        • Project: wafnew-project-Alibaba Cloud account ID-cn-hangzhou
        • Logstore: wafnew-logstore
      • WAF instances outside the Chinese mainland
        • Project: wafnew-project-Alibaba Cloud account ID-ap-southeast-1
        • Logstore: wafnew-logstore
    		Custom
    Cloud FirewallInternet traffic logs
    • Project: cloudfirewall-project-Alibaba Cloud account ID-cn-hangzhou
    • Logstore: cloudfirewall-logstore
    		Report
    ActionTrailActionTrail access logs
    • Project: custom project
    • Logstore: actiontrail_Trail name
    		actiontrail_Trail name_audit_center_cn
    Platform operation logsCustominnertrail_Trail name_audit_center_cn
  • Networking
    Cloud serviceLogProject and LogstoreDashboard
    SLBLayer 7 access logsCustom
    • slb-user-log-slb_layer7_operation_center_cn
    • slb-user-log-slb_layer7_access_center_cn
    Metrics that are accurate to the secondCustom
    • SLB Layer 4 Monitoring
    • SLB Layer 4 Data Analysis
    VPCFlow logsCustom
    • Logstore Name-vpc_flow_log_traffic_cn
    • Logstore Name-vpc_flow_log_rejection_cn
    • Logstore Name-vpc_flow_log_overview_cn
    Elastic IP Address (EIP)Internet traffic logsCustomeip_monitoring
    API GatewayAccess logsCustomLogstore name_apigateway access log
    Dynamic Route for CDN (DCDN)Real-time logs
    • Project: dcdn-edge-rtlog-Region ID-Random ID
    • dcdn-edge-rtlog
    		DCDN Access Center
  • Databases
    Cloud serviceLogProject and LogstoreDashboard
    PolarDB-X 1.0SQL audit logs
    • Project: drds-audit-Region ID-Alibaba Cloud account ID
    • Logstore: drds-audit-log
    • DRDS Operation Center (Simple)
    • DRDS Performance Center
    • DRDS Security Center
    ApsaraDB RDSSQL audit logsCustom
    • RDS Operation Center
    • RDS Performance Center
    • RDS Security Center
    ApsaraDB for Redis
    • Project: nosql-Alibaba Cloud account ID-Region ID
    • Logstores:
      • redis_audit_log
      • redis_slow_run_log
    • Redis Audit Center
    • Redis Slow Log Center
    ApsaraDB for MongoDB
    • Project: nosql-Alibaba Cloud account ID-Region ID
    • Logstores:
      • mongo_audit_log
      • mongo_slow_run_log
    		Mongo Audit Log Center
  • IoT
    Cloud serviceLogProject and LogstoreDashboard
    IoT PlatformIoT Platform operational logs
    • Project: iot-log-Alibaba Cloud account ID-Region ID
    • Logstore: iot_logs
    		IoT Operation Center