Security Center integrates with Simple Log Service, allowing you to query and analyze host and security logs from your assets. Security Center automatically collects and stores logs in real time and uses Simple Log Service to provide log query and analysis, reporting, alerting, and delivery to downstream computing systems.
Prerequisites
Ensure that log analysis is enabled. For more information, see Enable log analysis.
Procedure
You can select a log type to query and analyze collected log data in real time, view or edit dashboards, and set alert monitoring rules.
Log on to the Security Center console.
In the navigation pane on the left, choose . In the upper-left corner of the console, select the region where your assets are located:Chinese Mainland或Outside Chinese MainlandOutside China.
In the upper-left corner of the Log Analysis page, select the log type that you want to view and set Log Status to Enabled.
On the Log Analysis page, you can query and analyze logs.
You can do the following:
The Log Analysis page displays the query and analysis results for the log type that you selected in Step 3. The system automatically provides a corresponding search statement.
Click the time field above the Search & Analyze button. In the Time panel, set a time range and then click Search & Analyze to view the logs for the specified period.
NoteSecurity Center logs are stored for 180 days. After this period, log entries are automatically deleted.