Log Service and Alibaba Cloud Object Storage Service (OSS) have launched CloudLens for OSS. It provides a unified management view at the bucket level. It also offers visual analysis for resource usage, access analysis, anomaly detection, and security analysis. CloudLens for OSS provides scenario-based operations and maintenance (O&M) to make your bucket assets observable. This topic describes the features, assets, pricing, and limits of CloudLens for OSS.
Features
CloudLens for OSS supports the following features.
Access management
Centrally manage all eligible OSS buckets and their log collection status under your Alibaba Cloud account. For information about the eligibility criteria, see Limits.
Centrally manage destination repositories (projects, logstores, and metricstores).
The Access Management page has two tabs: Bucket List and Destination Repository. On the Bucket List tab, view the detailed access log collection status (Collecting or Disabled) for each bucket. Manage the collection status by clicking the Enable or Disable link. The Actions column provides links to Log Query and Report Center.
Query and analysis
Query and analyze OSS detailed access logs and metering logs in real time. In the navigation pane on the left, click Query and Analysis to expand the Detailed Access Logs and Metering Logs sub-items. On the log query page, select a region and a logstore, such as
oss-log-store. Enter a query statement in the search box, set a time range, and then click Query/Analyze to view the results. The results are displayed on three tabs: Raw Logs, Statistical Charts, and Log Clustering. The raw log details show fields such asacc_access_region,access_id,bucket,bucket_location, andclient_ip. The Quick Analysis panel on the left lets you filter by field.Anomaly detection
It provides an alert dashboard for you to intuitively analyze alert distribution and trends.
It provides alert management and supports alert configuration at the bucket level.
In the navigation pane on the left, choose Anomaly Detection > Alert Dashboard. The page displays statistics for Alerts Triggered Within 24 Hours (number of active alerts, number of pending alert events, and number of rule/channel configuration errors), a bar chart for Today's Alert Data, a line chart for Alert Trigger Trend vs. Yesterday, a donut chart for Alert Severity Distribution, and a list of Recent Alert Events.
Report center
Report
Feature
Resource usage
Provides an overview of basic metrics such as OSS storage and traffic. This helps you get a complete picture of your OSS usage.
Access analysis
Analyzes information such as traffic distribution and top access patterns for each OSS bucket.
Security analysis
Exposes configuration risks and high-risk object operations in OSS buckets.
In the navigation pane on the left, you can go to the corresponding report page under the Report Center menu. The Resource Usage page has four tabs: OSS Usage Overview, Storage Usage Details, Traffic and Bandwidth Usage Details, and Request Usage. You can filter by region and bucket. The page displays charts showing trends and regional distribution for storage, traffic, and requests.
Asset details
After you enable CloudLens for OSS, Log Service automatically creates a dedicated project, logstore, and metricstore to store logs from your OSS buckets.
Project | Logstore/Metricstore | Description |
oss-log-Alibaba Cloud account ID-region ID | oss-log-store |
|
oss-metering-log |
| |
oss_metric |
| |
aliyun-product-data-Alibaba Cloud account ID-cn-heyuan | None | A dedicated project required by CloudLens. For more information, see Notes. |
Pricing
Currently, CloudLens for OSS lets you query and analyze metering logs (free for the last 60 days), time series monitoring data (free for the last 60 days), and detailed access logs (free for the last 7 days, with a write quota of 900 GB/day, which is about 900 million log entries if each is 1 KB). If you exceed these limits, Log Service charges you separately.
CloudLens for OSS provides a free monthly shard quota of 31 shard-days. If you exceed this quota, Log Service charges you separately.
Log Service charges standard fees for operations on dedicated logstores, such as read traffic, public network traffic, data transformation, and data shipping.
The alert feature is free to use. You are only charged a small channel fee for configured SMS messages and voice calls.
For more information about Log Service billing, see Billing for Pay-As-You-Go.
Limits
You cannot write other data to, modify, or delete indexes in dedicated logstores and metricstores. However, there are no special limits on features such as query, statistics, and alerting.
ImportantFeatures such as query and analysis, reports, and alerts depend on data indexes. Customizing indexes may cause CloudLens features to stop working.
You cannot delete dedicated logstores and metricstores.
If your Alibaba Cloud account has an overdue payment, the real-time query feature for OSS logs is suspended.
Currently, CloudLens for OSS is available in the following regions.
Cloud Type
Region
Alibaba Cloud public cloud
China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Chengdu), China (Hong Kong), Singapore, South Korea (Seoul), Thailand (Bangkok), Malaysia (Kuala Lumpur), Indonesia (Jakarta), Philippines (Manila), Japan (Tokyo), US (Silicon Valley), US (Virginia), Germany (Frankfurt), UK (London), UAE (Dubai)
Notes
The CloudLens feature requires at least one project to exist under your Alibaba Cloud account.
When you enable and use CloudLens, Simple Log Service checks whether a project exists under your account using the following logic.
Detection logic
-
When you enable the CloudLens feature for the first time, Simple Log Service checks whether a project exists under your Alibaba Cloud account. If no project exists, a project named
aliyun-product-data-Alibaba Cloud account ID-cn-heyuanis created in the China (Heyuan) region. -
After you enable CloudLens and navigate to the CloudLens page, Simple Log Service only checks whether a project exists under your Alibaba Cloud account. It does not automatically create a project in the China (Heyuan) region. To create a project manually, see Manage projects.
Delete a project
-
To delete the
aliyun-product-data-Alibaba Cloud account ID-cn-heyuanproject, open Cloud Shell and run the following command. Replace Alibaba Cloud account ID with your actual account ID.aliyunlog log delete_project --project_name=aliyun-product-data-Alibaba Cloud account ID-cn-heyuan --region-endpoint=cn-heyuan.log.aliyuncs.com -
To delete other projects and Logstores, see Manage Logstores and Manage projects.