All Products
Search
Document Center

Simple Log Service:CloudLens for OSS

Last Updated:Aug 26, 2026

Log Service and Alibaba Cloud Object Storage Service (OSS) have launched CloudLens for OSS. It provides a unified management view at the bucket level. It also offers visual analysis for resource usage, access analysis, anomaly detection, and security analysis. CloudLens for OSS provides scenario-based operations and maintenance (O&M) to make your bucket assets observable. This topic describes the features, assets, pricing, and limits of CloudLens for OSS.

Features

CloudLens for OSS supports the following features.

  • Access management

    • Centrally manage all eligible OSS buckets and their log collection status under your Alibaba Cloud account. For information about the eligibility criteria, see Limits.

    • Centrally manage destination repositories (projects, logstores, and metricstores).

    The Access Management page has two tabs: Bucket List and Destination Repository. On the Bucket List tab, view the detailed access log collection status (Collecting or Disabled) for each bucket. Manage the collection status by clicking the Enable or Disable link. The Actions column provides links to Log Query and Report Center.

  • Query and analysis

    Query and analyze OSS detailed access logs and metering logs in real time. In the navigation pane on the left, click Query and Analysis to expand the Detailed Access Logs and Metering Logs sub-items. On the log query page, select a region and a logstore, such as oss-log-store. Enter a query statement in the search box, set a time range, and then click Query/Analyze to view the results. The results are displayed on three tabs: Raw Logs, Statistical Charts, and Log Clustering. The raw log details show fields such as acc_access_region, access_id, bucket, bucket_location, and client_ip. The Quick Analysis panel on the left lets you filter by field.

  • Anomaly detection

    • It provides an alert dashboard for you to intuitively analyze alert distribution and trends.

    • It provides alert management and supports alert configuration at the bucket level.

    In the navigation pane on the left, choose Anomaly Detection > Alert Dashboard. The page displays statistics for Alerts Triggered Within 24 Hours (number of active alerts, number of pending alert events, and number of rule/channel configuration errors), a bar chart for Today's Alert Data, a line chart for Alert Trigger Trend vs. Yesterday, a donut chart for Alert Severity Distribution, and a list of Recent Alert Events.

  • Report center

    Report

    Feature

    Resource usage

    Provides an overview of basic metrics such as OSS storage and traffic. This helps you get a complete picture of your OSS usage.

    Access analysis

    Analyzes information such as traffic distribution and top access patterns for each OSS bucket.

    Security analysis

    Exposes configuration risks and high-risk object operations in OSS buckets.

    In the navigation pane on the left, you can go to the corresponding report page under the Report Center menu. The Resource Usage page has four tabs: OSS Usage Overview, Storage Usage Details, Traffic and Bandwidth Usage Details, and Request Usage. You can filter by region and bucket. The page displays charts showing trends and regional distribution for storage, traffic, and requests.

Asset details

After you enable CloudLens for OSS, Log Service automatically creates a dedicated project, logstore, and metricstore to store logs from your OSS buckets.

Project

Logstore/Metricstore

Description

oss-log-Alibaba Cloud account ID-region ID

oss-log-store

  • When you enable collection for detailed access logs, Log Service automatically creates this logstore. It stores detailed access logs for the region, including OSS bucket access logs, metering logs, and batch deletion logs.

    Note

    oss-log-store may contain both Detailed Access Logs and Hourly Metering Logs (which are different from the metering logs described below). _topic_:oss_access_log represents Detailed Access Logs, and _topic_:oss_metering_log represents Hourly Metering Logs.

  • Supports real-time collection.

oss-metering-log

  • When you enable CloudLens for OSS for the first time, Log Service automatically creates this logstore in the dedicated project of the specified region. It centrally stores metering logs, which are the hourly aggregated metering data for OSS buckets.

  • There is a delay of several hours. These logs are mainly used for auxiliary analysis.

oss_metric

  • When you enable CloudLens for OSS for the first time, Log Service automatically creates this metricstore in the dedicated project of the specified region. It centrally stores time series monitoring data, which are the time series metrics for OSS buckets.

  • The data comes from the OSS O&M system.

aliyun-product-data-Alibaba Cloud account ID-cn-heyuan

None

A dedicated project required by CloudLens. For more information, see Notes.

Pricing

  • Currently, CloudLens for OSS lets you query and analyze metering logs (free for the last 60 days), time series monitoring data (free for the last 60 days), and detailed access logs (free for the last 7 days, with a write quota of 900 GB/day, which is about 900 million log entries if each is 1 KB). If you exceed these limits, Log Service charges you separately.

  • CloudLens for OSS provides a free monthly shard quota of 31 shard-days. If you exceed this quota, Log Service charges you separately.

  • Log Service charges standard fees for operations on dedicated logstores, such as read traffic, public network traffic, data transformation, and data shipping.

  • The alert feature is free to use. You are only charged a small channel fee for configured SMS messages and voice calls.

For more information about Log Service billing, see Billing for Pay-As-You-Go.

Limits

  • You cannot write other data to, modify, or delete indexes in dedicated logstores and metricstores. However, there are no special limits on features such as query, statistics, and alerting.

    Important

    Features such as query and analysis, reports, and alerts depend on data indexes. Customizing indexes may cause CloudLens features to stop working.

  • You cannot delete dedicated logstores and metricstores.

  • If your Alibaba Cloud account has an overdue payment, the real-time query feature for OSS logs is suspended.

  • Currently, CloudLens for OSS is available in the following regions.

    Cloud Type

    Region

    Alibaba Cloud public cloud

    China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Chengdu), China (Hong Kong), Singapore, South Korea (Seoul), Thailand (Bangkok), Malaysia (Kuala Lumpur), Indonesia (Jakarta), Philippines (Manila), Japan (Tokyo), US (Silicon Valley), US (Virginia), Germany (Frankfurt), UK (London), UAE (Dubai)

Notes

Warning

The CloudLens feature requires at least one project to exist under your Alibaba Cloud account.

When you enable and use CloudLens, Simple Log Service checks whether a project exists under your account using the following logic.

Detection logic

  1. When you enable the CloudLens feature for the first time, Simple Log Service checks whether a project exists under your Alibaba Cloud account. If no project exists, a project named aliyun-product-data-Alibaba Cloud account ID-cn-heyuan is created in the China (Heyuan) region.

  2. After you enable CloudLens and navigate to the CloudLens page, Simple Log Service only checks whether a project exists under your Alibaba Cloud account. It does not automatically create a project in the China (Heyuan) region. To create a project manually, see Manage projects.

Delete a project

  • To delete the aliyun-product-data-Alibaba Cloud account ID-cn-heyuan project, open Cloud Shell and run the following command. Replace Alibaba Cloud account ID with your actual account ID.

    aliyunlog log delete_project --project_name=aliyun-product-data-Alibaba Cloud account ID-cn-heyuan --region-endpoint=cn-heyuan.log.aliyuncs.com
  • To delete other projects and Logstores, see Manage Logstores and Manage projects.