Log Service and ApsaraDB for Redis jointly launch the CloudLens for Redis application. You can use the application to manage ApsaraDB for Redis instances in a centralized manner and collect the run logs, slow query logs, and audit logs of the instances. This topic describes the features, assets, billing, and limits of CloudLens for Redis.

Features

CloudLens for Redis provides the following features:

  • Allows you to manage all ApsaraDB for Redis instances that meet specified conditions within your Alibaba Cloud account in a centralized manner. For more information about the conditions, see Limits.
  • Allows you to enable the log collection feature for run logs, slow query logs, and audit logs of ApsaraDB for Redis instances with a few clicks and manage the log collection status of the instances in a centralized manner.
  • Allows you to store, query, and analyze the run logs, slow query logs, and audit logs of ApsaraDB for Redis instances in real time.
  • Provides various reports.

Assets

After you enable CloudLens for Redis and data collection for an ApsaraDB for Redis instance, Log Service automatically creates a project named in the nosql-Alibaba Cloud account ID-Region ID format and two Logstores named redis_audit_log_standard and redis_slow_run_log in the region where the instance resides.
  • redis_audit_log_standard: This Logstore is used to store the audit logs of ApsaraDB for Redis instances.
    Audit logs are used to review operations and ensure security compliance.
    • Audit logs help security auditors obtain information such as operator identities and time of data modification, and identify internal risks such as abuse of permissions and execution of non-compliant commands.
    • Audit logs help business systems meet audit requirements to ensure security compliance.
  • redis_slow_run_log: This Logstore is used to store the slow query logs and run logs of ApsaraDB for Redis instances.
    • Slow query logs record the requests whose execution time exceeds a specified threshold. You can use slow query logs to resolve performance issues and optimize requests.
    • Run logs record the status of ApsaraDB for Redis instances during their lifecycles. You can use run logs to resolve O&M issues.

Billing

  • ApsaraDB for Redis: You are charged based on the storage space and retention period of audit logs. The fees that you must pay vary based on the region of your ApsaraDB for Redis instance. For more information, see Billable items and prices.

    You are not charged when you write, store, or query slow query logs and run logs.

  • Log Service: After you collect logs from ApsaraDB for Redis to Log Service, you can transform the logs or ship the logs. You can also read the logs in stream mode by using a public endpoint of Log Service. You are charged for the read traffic consumed when you access Log Service over the Internet, data transformation, and data shipping. For more information, see Billable items.

Limits

  • Log Service collects logs from an ApsaraDB for Redis instance only if the instance meets the following conditions:
    • The audit logging feature is enabled for the instance. For more information, see Enable the new audit log feature.
    • The major engine version of the instance is Redis 4.0 or later, and the minor engine version of the instance is the latest version. For more information about how to upgrade the engine versions of an ApsaraDB for Redis instance, see Upgrade the major version and Update the minor version.
    • The instance runs Community Edition or is a performance-enhanced instance that uses local disks.
  • You cannot disable log collection for slow query logs or run logs.

Precautions

If you enable a CloudLens application, Log Service automatically checks whether a project whose name is in the aliyun-product-data-<Alibaba Cloud account ID>-cn-heyuan format exists within your Alibaba Cloud account. If the project does not exist, Log Service automatically creates the project.

If you want to delete the project, open the Cloud Shell and run the aliyunlog log delete_project --project_name=aliyun-product-data-<Alibaba Cloud account ID>-cn-heyuan --region-endpoint=cn-heyuan.log.aliyuncs.com command. Replace Alibaba Cloud account ID based on your business scenario.
Notice If you delete the project, all CloudLens applications become unavailable. Proceed with caution.