Log Service allows you to view details about an alert in logon-free mode. After you receive an alert notification, you can view the alert details without the need to log on to the Log Service console. You can also perform other operations in logon-free mode. For example, you can manage alert rules and alert incidents.

Limits

  • The logon-free mode is automatically enabled only for the DingTalk and Lark notification methods. If you want to enable the logon-free mode for other notification methods, you must add the signin_url variable to the alert template that you use. For example, you can add [View Details]({{ alert.signin_url }}) to the content of an alert template in the Markdown format. For more information about how to create an alert template, see Create an alert template. Logon-free
  • By default, a URL that is used to view alert details in logon-free mode is valid only for 12 hours. You can modify the validity period of a logon-free URL in the Log Service console. For more information, see Modify the validity period of a logon-free URL.
  • If multiple alerts are merged before an alert notification is sent, you can use the URL that is provided in the alert notification to view only the details about the first alert in logon-free mode. If you want to view the details about each alert in logon-free mode, you must add the signin_url variable for each alert to the alert template.
  • If you use the SMS Message notification method, we recommend that you do not enable the logon-free mode. A URL that is used to view alert details in logon-free mode is long and may be truncated when the URL is sent in a text message. In this case, the URL that is provided in a text message may be invalid.

Authorization for the logon-free mode

To use the logon-free mode, you must complete authorization. During the authorization process, Alibaba Cloud automatically creates the AliyunServiceRoleForSLSAlert service-linked role. This role allows Log Service to access the required cloud resources. For more information, see Manage the AliyunServiceRoleForSLSAlert service-linked role.

Notice
  • You need to perform authorization only once.
  • If you use a RAM user to perform the authorization, you must create the following custom policy and attach the policy to the RAM user. For more information, see Create a custom policy and Grant permissions to a RAM user. 
    {
  "Statement": [{
    "Action": "ram:CreateServiceLinkedRole",
    "Resource": "*",
    "Effect": "Allow",
    "Condition": {
      "StringEquals": {
        "ram:ServiceName": "alert.log.aliyuncs.com"
      }
    }
  }],
  "Version": "1"
}
  1. Log on to the Log Service console.
  2. In the Projects section, click a project.
  3. In the left navigation pane, click Alerts.
  4. On the Alert Center page, click Authorize Now.
    Logon-free

Operations that are supported in logon-free mode

After you receive an alert notification, you can click the URL that is provided in the notification to view alert details in logon-free mode. You are not required to enter logon information before the alert details page appears. For example, if you receive an alert notification in DingTalk, you can click View Details to view the alert details in logon-free mode. On the alert details page, you can perform various operations on the alert. For example, you can disable the alert rule, specify an alert handler, or specify the alert status.
  • Alert notificationLogon-free
  • Alert detailsLogon-free

Modify the validity period of a logon-free URL

  1. Log on to the Log Service console.
  2. Go to the Resource data page.
    1. In the Projects section, click a project.
    2. In the left-side navigation pane, click Alerts.
    3. On the Alert Center page, choose Alert Management > Resource data.
  3. In the upper-right corner of the page, turn off Hide Metadata.
  4. Find sls.alert.global_config and click Data.
  5. In the Data Management (sls.alert.global_config) dialog box, click Edit in the Actions column for default_config.
  6. In the Edit Data dialog box, modify the value of the Config Content parameter and click OK.

    In the Config Content field, add "signin":{"token_exp":"12h"} to specify the validity period of a logon-free URL. The minimum value is 1h and the maximum value is 7d.

    Logon-free validity period