All Products
Search
Document Center

Simple Log Service:Alibaba Cloud service logs

Last Updated:Dec 26, 2023

Log Service can collect logs from multiple types of Alibaba Cloud services, such as elastic computing, storage, security, and database services. The logs record operational statistics, such as user operations, running status, and business dynamics of Alibaba Cloud services.

Note

Log Service provides the Log Audit Service application that collects logs across accounts from the following Alibaba Cloud services: ActionTrail, Container Service for Kubernetes (ACK), Object Storage Service (OSS), Apsara File Storage NAS (NAS), Server Load Balancer (SLB), Application Load Balancer (ALB), API Gateway, Virtual Private Cloud (VPC), ApsaraDB RDS, PolarDB for Xscale, PolarDB, Web Application Firewall (WAF), Anti-DDoS, Cloud Firewall, and Security Center. For more information, see Overview of Log Audit Service.

Elastic computing

Cloud service

Log

Project and Logstore

Dashboard

Elastic Compute Service (ECS)

Full logs

Custom.

The logs are collected by using Logtail. For more information, see Use Logtail to collect logs.

Custom

ACK

Custom

Custom

ACK@Edge

Logs of control plane components

  • Projects:

    • Custom

    • k8s-log-Cluster ID

  • Logstores:

    • apiserver-Cluster ID

    • kcm-Cluster ID

    • scheduler-Cluster ID

    • ccm-Cluster ID

    • audit-Cluster ID

    • config-operation-log

  • Kubernetes CVE Vulnerability

  • Kubernetes Elastic Autoscale

  • Kubernetes Network Policy Audit

  • Kubernetes Node Operation Audit

  • Kubernetes Audit Center Overview

  • Kubernetes Resource Operation Overview

  • Kubernetes Resource Operation Details

  • Kubernetes Operation Audit for Accounts

Distributed Cloud Container Platform for Kubernetes (ACK One)

  • Projects:

    • Custom

    • k8s-log-Master instance ID

  • Logstores:

    • apiserver-Master instance ID

    • kcm-Master instance ID

    • application-controller-Master instance ID

    • cluster-operator-Master instance ID

    • audit-Master instance ID

  • Kubernetes CVE Vulnerability

  • Kubernetes Elastic Autoscale

  • Kubernetes Network Policy Audit

  • Kubernetes Node Operation Audit

  • Kubernetes Audit Center Overview

  • Kubernetes Resource Operation Overview

  • Kubernetes Resource Operation Details

  • Kubernetes Operation Audit for Accounts

Serverless Kubernetes (ASK) Pro

Logs of control plane components

  • Projects:

    • Custom

    • k8s-log-Cluster ID

  • Logstores:

    • apiserver-Cluster ID

    • ccm-Cluster ID

    • kcm-Cluster ID

Custom

Elastic Container Instance (ECI)

ECI logs

Custom

Custom

Serverless App Engine (SAE)

Custom

Custom

Function Compute

Execution logs

  • Project: aliyun-fc-Region ID-bb47c1e4-cdd4-5318-978e-d748952652c8

  • Logstore: function-log

Custom

WUYING Workspace

Operation logs

  • Project: a project whose name starts with elastic-desktop-

  • Logstore: a Logstore whose name starts with elastic-desktop-

Custom

Storage

Cloud service

Log

Project and Logstore

Dashboard

OSS

Access logs

  • Project: oss-log-Alibaba Cloud account ID-Region ID

  • Logstore: oss-log-store

  • oss-log-store_access_center

  • oss-log-store_audit_center

  • oss-log-store_operation_center

  • oss-log-store_performance_center

NAS

Access logs

  • Project: nas-Alibaba Cloud account ID-Region ID

  • Logstore: nas-nfs

  • nas-nfs-nas_summary_dashboard_cn

  • nas-nfs-nas_audit_dashboard_cn

  • nas-nfs-nas_detail_dashboard_cn

Security

Cloud service

Log

Project and Logstore

Dashboard

Anti-DDoS Pro

Full logs

  • Anti-DDoS Pro instances in the Chinese mainland

    • Project: ddos-pro-project-Alibaba Cloud account ID-cn-hangzhou

    • Logstore: ddos-pro-logstore

  • Anti-DDoS Pro instances outside the Chinese mainland

    • Project: ddos-pro-Alibaba Cloud account ID-ap-southeast-1

    • Logstore: ddos-pro-logstore

  • DDoS Operation Center

  • DDoS Access Center

Anti-DDoS Pro and Anti-DDoS Premium

Full logs

  • Anti-DDoS Pro

    • Project: ddoscoo-project-Alibaba Cloud account ID-cn-hangzhou

    • Logstore: ddoscoo-logstore

  • Anti-DDoS Premium

    • Project: ddosdip-project-Alibaba Cloud account ID-ap-southeast-1

    • Logstore: ddosdip-logstore

  • DDoS Operation Center

  • DDoS Access Center

Anti-DDoS Origin

Anti-DDoS Origin logs

  • Project: ddosbgp-project-Alibaba Cloud account ID-cn-hangzhou

  • Logstore: ddosbgp-logstore

  • Anti-DDoS Origin Events Report

  • Anti-DDoS Origin Mitigation Report

Security Center

  • Security logs

    • Vulnerability logs

    • Baseline logs

    • Alert logs

    • Configuration assessment logs

  • Network logs

    • Domain Name System (DNS) logs

    • Local DNS logs

    • Network session logs

    • Web access logs

  • Host logs

    • Process startup logs

    • Network connection logs

    • Logon logs

    • Brute-force attack logs

    • Process snapshot logs

    • Account snapshot logs

    • Port snapshot logs

    • DNS query logs

  • Project: sas-log-Alibaba Cloud account ID-Region ID

  • Logstore: sas-log

  • Network logs

    • SAS DNS Access Center

    • SAS Network Session Center

    • SAS Web Access Center

  • Host logs

    • SAS Login Center

    • SAS Process Center

    • SAS Connection Center

  • Security logs

    • SAS Baseline Center

    • SAS Vulnerability Center

    • SAS Alarm Center

WAF 2.0

  • WAF instances in the Chinese mainland

    • Project: waf-project-Alibaba Cloud account ID-cn-hangzhou

    • Logstore: waf-logstore

  • WAF instances outside the Chinese mainland

    • Project: waf-project-Alibaba Cloud account ID-ap-southeast-1

    • Logstore: waf-logstore

  • WAF Operation Center

  • WAF Access Center

  • WAF Security Center

WAF 3.0

  • Subscription WAF instances

    • WAF instances in the Chinese mainland

      • Project: waf-project-Alibaba Cloud account ID-cn-hangzhou

      • Logstore: wafng-logstore

    • WAF instances outside the Chinese mainland

      • Project: waf-project-Alibaba Cloud account ID-ap-southeast-1

      • Logstore: wafng-logstore

  • Pay-as-you-go WAF instances

    • WAF instances in the Chinese mainland

      • Project: waf-project-Alibaba Cloud account ID-cn-hangzhou

      • Logstore: wafnew-logstore

    • WAF instances outside the Chinese mainland

      • Project: waf-project-Alibaba Cloud account ID-ap-southeast-1

      • Logstore: wafnew-logstore

Custom

Cloud Firewall

Internet traffic logs

  • Project: cloudfirewall-project-Alibaba Cloud account ID-cn-hangzhou

  • Logstore: cloudfirewall-logstore

Report

ActionTrail

ActionTrail access logs

  • Project: custom project

  • Logstore: actiontrail_Trail name

actiontrail_Trail name_audit_center_cn

Platform operation logs

Custom

innertrail_Trail name_audit_center_cn

Cloud Config

Custom

Custom

Networking

Cloud service

Log

Project and Logstore

Dashboard

Classic Load Balancer (CLB)

Layer 7 access logs

Custom

  • slb-user-log-slb_layer7_operation_center_cn

  • slb-user-log-slb_layer7_access_center_cn

Metrics that are accurate to seconds

Custom

  • SLB Layer 4 Monitoring

  • SLB Layer 4 Data Analysis

ALB

Layer 7 access logs and metrics that are accurate to seconds

Custom

  • Monitoring Overview

  • Monitoring Center

  • Real-time Monitoring

  • Instance Inspection

  • Access Overview

VPC

Flow logs

Custom

  • Logstore Name-vpc_flow_log_traffic_cn

  • Logstore Name-vpc_flow_log_rejection_cn

  • Logstore Name-vpc_flow_log_overview_cn

Cloud Enterprise Network (CEN)

Flow logs

Custom

Custom

Smart Access Gateway (SAG)

Flow logs

Custom

Custom

Elastic IP Address (EIP)

Internet traffic logs

Custom

eip_monitoring

API Gateway

Access logs

Custom

Logstore name_apigateway access log

Dynamic Route for CDN (DCDN)

Real-time logs

  • Project: dcdn-edge-rtlog-Region ID-Random ID

  • dcdn-edge-rtlog

DCDN Access Center

Global Accelerator (GA)

GA access logs

Custom

None

Databases

Cloud service

Log

Project and Logstore

Dashboard

PolarDB for Xscale

SQL audit logs

  • Project: drds-audit-Region ID-Alibaba Cloud account ID

  • Logstore: drds-audit-log

  • DRDS Operation Center (Simple)

  • DRDS Performance Center

  • DRDS Security Center

ApsaraDB RDS

SQL audit logs

Custom

  • RDS Operation Center

  • RDS Performance Center

  • RDS Security Center

ApsaraDB for Redis

  • Project: nosql-Alibaba Cloud account ID-Region ID

  • Logstores:

    • redis_audit_log

    • redis_slow_run_log

  • Redis Audit Center

  • Redis Slow Log Center

ApsaraDB for MongoDB

  • Project: nosql-Alibaba Cloud account ID-Region ID

  • Logstores:

    • mongo_audit_log

    • mongo_slow_run_log

Mongo Audit Log Center

Big data computing

Cloud service

Log

Project and Logstore

Dashboard

E-MapReduce (EMR)

Access logs

  • Project: custom

  • Logstore: emr_EMR service name_log

Custom

IoT

Cloud service

Log

Project and Logstore

Dashboard

IoT Platform

IoT Platform operational logs

  • Project: iot-log-Alibaba Cloud account ID-Region ID

  • Logstore: iot_logs

IoT Operation Center

Middleware

Cloud service

Log

Project and Logstore

Dashboard

Microservices Engine (MSE)

Access logs

  • Projects:

    • Custom project

    • aliyun-product-data-Alibaba Cloud account ID-Region ID

  • Logstore: mse_gw_access_log

  • MSE Ingress Monitor

  • MSE Ingress Access

  • MSE Ingress Detail

  • MSE Ingress TOP

  • MSE Ingress Instance Detail

Enterprise Distributed Application Service (EDAS)

File logs or container stdout and stderr

Custom

Custom

Service Mesh (ASM)

  • Projects:

    • Custom project

    • mesh-log-ASM instance ID

  • Logstore

    • istio-ASM instance ID

    • audit-ASM instance ID

  • Mesh Audit Center Overview

  • Mesh Resource Operation Overview

  • Mesh Resource Operation Details

  • Mesh Operation Audit for Accounts

AI and machine learning

Cloud service

Log

Project and Logstore

Dashboard

Machine Learning Platform for AI (PAI)

Elastic Algorithm Service (EAS) service logs

Custom

Custom