Alibaba Cloud service logs - Log Service - Alibaba Cloud Documentation Center

Log Service can collect logs from multiple types of Alibaba Cloud services, such as elastic computing, storage, security, and database services. The logs record operational statistics, such as user operations, running status, and business dynamics of Alibaba Cloud services.

Note

Log Service provides the Log Audit Service application that collects logs across accounts from the following Alibaba Cloud services: ActionTrail, Container Service for Kubernetes (ACK), Object Storage Service (OSS), Apsara File Storage NAS (NAS), Server Load Balancer (SLB), Application Load Balancer (ALB), API Gateway, Virtual Private Cloud (VPC), ApsaraDB RDS, PolarDB for Xscale, PolarDB, Web Application Firewall (WAF), Anti-DDoS, Cloud Firewall, and Security Center. For more information, see Overview of Log Audit Service.

Elastic computing

Cloud service	Log	Project and Logstore	Dashboard
Elastic Compute Service (ECS)	Full logs	Custom. The logs are collected by using Logtail. For more information, see Use Logtail to collect logs.	Custom
ACK	Business file logs, container standard output (stdout), and standard error (stderr) Kubernetes audit logs Kubernetes event centers Logs of control plane components	Custom	Custom
ACK@Edge	Logs of control plane components	Projects: Custom k8s-log-Cluster ID Logstores: apiserver-Cluster ID kcm-Cluster ID scheduler-Cluster ID ccm-Cluster ID audit-Cluster ID config-operation-log	Kubernetes CVE Vulnerability Kubernetes Elastic Autoscale Kubernetes Network Policy Audit Kubernetes Node Operation Audit Kubernetes Audit Center Overview Kubernetes Resource Operation Overview Kubernetes Resource Operation Details Kubernetes Operation Audit for Accounts
Distributed Cloud Container Platform for Kubernetes (ACK One)	Control plane logs and audit logs of master instances Control plane logs and audit logs of GitOps	Projects: Custom k8s-log-Master instance ID Logstores: apiserver-Master instance ID kcm-Master instance ID application-controller-Master instance ID cluster-operator-Master instance ID audit-Master instance ID	Kubernetes CVE Vulnerability Kubernetes Elastic Autoscale Kubernetes Network Policy Audit Kubernetes Node Operation Audit Kubernetes Audit Center Overview Kubernetes Resource Operation Overview Kubernetes Resource Operation Details Kubernetes Operation Audit for Accounts
Serverless Kubernetes (ASK) Pro	Logs of control plane components	Projects: Custom k8s-log-Cluster ID Logstores: apiserver-Cluster ID ccm-Cluster ID kcm-Cluster ID	Custom
Elastic Container Instance (ECI)	ECI logs	Custom	Custom
Serverless App Engine (SAE)	Business file logs Container stdout and stderr	Custom	Custom
Function Compute	Execution logs	Project: aliyun-fc-Region ID-bb47c1e4-cdd4-5318-978e-d748952652c8 Logstore: function-log	Custom
WUYING Workspace	Operation logs	Project: a project whose name starts with elastic-desktop- Logstore: a Logstore whose name starts with elastic-desktop-	Custom

Storage

Cloud service	Log	Project and Logstore	Dashboard
OSS	Access logs	Project: oss-log-Alibaba Cloud account ID-Region ID Logstore: oss-log-store	oss-log-store_access_center oss-log-store_audit_center oss-log-store_operation_center oss-log-store_performance_center
NAS	Access logs	Project: nas-Alibaba Cloud account ID-Region ID Logstore: nas-nfs	nas-nfs-nas_summary_dashboard_cn nas-nfs-nas_audit_dashboard_cn nas-nfs-nas_detail_dashboard_cn

Security

Cloud service	Log	Project and Logstore	Dashboard
Anti-DDoS Pro	Full logs	Anti-DDoS Pro instances in the Chinese mainland Project: ddos-pro-project-Alibaba Cloud account ID-cn-hangzhou Logstore: ddos-pro-logstore Anti-DDoS Pro instances outside the Chinese mainland Project: ddos-pro-Alibaba Cloud account ID-ap-southeast-1 Logstore: ddos-pro-logstore	DDoS Operation Center DDoS Access Center
Anti-DDoS Pro and Anti-DDoS Premium	Full logs	Anti-DDoS Pro Project: ddoscoo-project-Alibaba Cloud account ID-cn-hangzhou Logstore: ddoscoo-logstore Anti-DDoS Premium Project: ddosdip-project-Alibaba Cloud account ID-ap-southeast-1 Logstore: ddosdip-logstore	DDoS Operation Center DDoS Access Center
Anti-DDoS Origin	Anti-DDoS Origin logs	Project: ddosbgp-project-Alibaba Cloud account ID-cn-hangzhou Logstore: ddosbgp-logstore	Anti-DDoS Origin Events Report Anti-DDoS Origin Mitigation Report
Security Center	Security logs Vulnerability logs Baseline logs Alert logs Configuration assessment logs Network logs Domain Name System (DNS) logs Local DNS logs Network session logs Web access logs Host logs Process startup logs Network connection logs Logon logs Brute-force attack logs Process snapshot logs Account snapshot logs Port snapshot logs DNS query logs	Project: sas-log-Alibaba Cloud account ID-Region ID Logstore: sas-log	Network logs SAS DNS Access Center SAS Network Session Center SAS Web Access Center Host logs SAS Login Center SAS Process Center SAS Connection Center Security logs SAS Baseline Center SAS Vulnerability Center SAS Alarm Center
WAF 2.0	Access logs Protection logs	WAF instances in the Chinese mainland Project: waf-project-Alibaba Cloud account ID-cn-hangzhou Logstore: waf-logstore WAF instances outside the Chinese mainland Project: waf-project-Alibaba Cloud account ID-ap-southeast-1 Logstore: waf-logstore	WAF Operation Center WAF Access Center WAF Security Center
WAF 3.0	Access logs Protection logs	Subscription WAF instances WAF instances in the Chinese mainland Project: waf-project-Alibaba Cloud account ID-cn-hangzhou Logstore: wafng-logstore WAF instances outside the Chinese mainland Project: waf-project-Alibaba Cloud account ID-ap-southeast-1 Logstore: wafng-logstore Pay-as-you-go WAF instances WAF instances in the Chinese mainland Project: waf-project-Alibaba Cloud account ID-cn-hangzhou Logstore: wafnew-logstore WAF instances outside the Chinese mainland Project: waf-project-Alibaba Cloud account ID-ap-southeast-1 Logstore: wafnew-logstore	Custom
Cloud Firewall	Internet traffic logs	Project: cloudfirewall-project-Alibaba Cloud account ID-cn-hangzhou Logstore: cloudfirewall-logstore	Report
ActionTrail	ActionTrail access logs	Project: custom project Logstore: actiontrail_Trail name	actiontrail_Trail name_audit_center_cn
ActionTrail	Platform operation logs	Custom	innertrail_Trail name_audit_center_cn
Cloud Config	Configuration change logs Non-compliance events Scheduled snapshots	Custom	Custom

Networking

Cloud service	Log	Project and Logstore	Dashboard
Classic Load Balancer (CLB)	Layer 7 access logs	Custom	slb-user-log-slb_layer7_operation_center_cn slb-user-log-slb_layer7_access_center_cn
Classic Load Balancer (CLB)	Metrics that are accurate to seconds	Custom	SLB Layer 4 Monitoring SLB Layer 4 Data Analysis
ALB	Layer 7 access logs and metrics that are accurate to seconds	Custom	Monitoring Overview Monitoring Center Real-time Monitoring Instance Inspection Access Overview
VPC	Flow logs	Custom	Logstore Name-vpc_flow_log_traffic_cn Logstore Name-vpc_flow_log_rejection_cn Logstore Name-vpc_flow_log_overview_cn
Cloud Enterprise Network (CEN)	Flow logs	Custom	Custom
Smart Access Gateway (SAG)	Flow logs	Custom	Custom
Elastic IP Address (EIP)	Internet traffic logs	Custom	eip_monitoring
API Gateway	Access logs	Custom	Logstore name_apigateway access log
Dynamic Route for CDN (DCDN)	Real-time logs	Project: dcdn-edge-rtlog-Region ID-Random ID dcdn-edge-rtlog	DCDN Access Center
Global Accelerator (GA)	GA access logs	Custom	None

Databases

Cloud service	Log	Project and Logstore	Dashboard
PolarDB for Xscale	SQL audit logs	Project: drds-audit-Region ID-Alibaba Cloud account ID Logstore: drds-audit-log	DRDS Operation Center (Simple) DRDS Performance Center DRDS Security Center
ApsaraDB RDS	SQL audit logs	Custom	RDS Operation Center RDS Performance Center RDS Security Center
ApsaraDB for Redis	Audit logs Slow logs Operational logs	Project: nosql-Alibaba Cloud account ID-Region ID Logstores: redis_audit_log redis_slow_run_log	Redis Audit Center Redis Slow Log Center
ApsaraDB for MongoDB	Audit logs Slow logs Operational logs	Project: nosql-Alibaba Cloud account ID-Region ID Logstores: mongo_audit_log mongo_slow_run_log	Mongo Audit Log Center

Big data computing

Cloud service	Log	Project and Logstore	Dashboard
E-MapReduce (EMR)	Access logs	Project: custom Logstore: emr_EMR service name_log	Custom

IoT

Cloud service	Log	Project and Logstore	Dashboard
IoT Platform	IoT Platform operational logs	Project: iot-log-Alibaba Cloud account ID-Region ID Logstore: iot_logs	IoT Operation Center

Middleware

Cloud service	Log	Project and Logstore	Dashboard
Microservices Engine (MSE)	Access logs	Projects: Custom project aliyun-product-data-Alibaba Cloud account ID-Region ID Logstore: mse_gw_access_log	MSE Ingress Monitor MSE Ingress Access MSE Ingress Detail MSE Ingress TOP MSE Ingress Instance Detail
Enterprise Distributed Application Service (EDAS)	File logs or container stdout and stderr	Custom	Custom
Service Mesh (ASM)	Control plane logs KubeAPI operation audit logs	Projects: Custom project mesh-log-ASM instance ID Logstore istio-ASM instance ID audit-ASM instance ID	Mesh Audit Center Overview Mesh Resource Operation Overview Mesh Resource Operation Details Mesh Operation Audit for Accounts

AI and machine learning

Cloud service	Log	Project and Logstore	Dashboard
Machine Learning Platform for AI (PAI)	Elastic Algorithm Service (EAS) service logs	Custom	Custom