Background
The upgrade to Cloud Threat Detection and Response (CTDR) 2.0 introduces log integration. For more information about the CTDR upgrade, see [Notice] CTDR upgrade.
Unsupported logs
Four additional log types are now unsupported: Function Compute operational logs, DCDN EdgeRoutine logs, OSS hourly metering logs, and OSS batch deletion logs. This brings the total number of unsupported log types in CTDR 2.0 to 11. The following table provides details.
Cloud service | Log name | Reason for deprecation |
Security Center | Port snapshot logs | Duplicate data source. You can add the "Network snapshot logs" data source instead. |
Security Center | File read and write logs | This data source is no longer required due to upgrade. |
Anti-DDoS | Anti-DDoS Proxy flow logs (legacy) | The legacy version of Anti-DDoS Proxy is unpublished. |
Anti-DDoS | Anti-DDoS Origin logs | The log is unpublished. |
Cloud Firewall | Cloud Firewall alert logs | Duplicate data source. The original data source from the custom Simple Log Service is unpublished. It will be replaced by a new data source based on the predefined Simple Log Service. Note The new data source is still named "Cloud Firewall alert logs". For more information about the fields of the new data source, see Cloud Firewall alert logs, Cloud Firewall real-time alert logs. |
Web Application Firewall (WAF) | WAF CDN flow logs | Planning for CDN is paused. This log will be replaced by the new DCDN WAF block logs. For more information about the fields, see DCDN WAF blocking logs. |
Content Delivery Network (CDN) | CDN WAF flow logs | Planning for CDN is paused. This log will be replaced by the new DCDN WAF block logs. |
Function Compute | Function Compute operational logs | This log is no longer collected because no security detection scenarios are available. |
Dynamic Content Delivery Network (DCDN) | DCDN EdgeRoutine logs | This log is no longer collected because no security detection scenarios are available. |
Object Storage Service (OSS) | OSS hourly metering logs | This log is no longer collected because no security detection scenarios are available. |
Object Storage Service (OSS) | OSS batch deletion logs | rce no longer exists. It has been merged into OSS flow logs. |