Simple Log Service:Build a service to upload logs from mobile apps to Simple Log Service

Terms

Step 1: Create a project and a Logstore in Simple Log Service

1. Log on to the Simple Log Service console.

2. Create a project. In this example, a project named slstestproject is created.

3. Create a Logstore. In this example, a Logstore named slstestlogstore is created.

Step 2: Create a RAM user and authorize the RAM user to assume a RAM role

1. Create a RAM user. In this example, a RAM user named ramslsuser is created. After the RAM user is created, the system automatically generates an AccessKey pair for the RAM user. We recommend that you record the AccessKey pair and keep the AccessKey pair secure.

2. Authorize the RAM user to call the AssumeRole operation of STS.

   a. On the Users page, find the RAM user that you want to manage and click Add Permissions in the Actions column.

   b. In the Grant Permission panel, select the AliyunSTSAssumeRoleAccess system policy and click Grant permissions.

Step 3: Create a RAM role and authorize the RAM role to access resources

A RAM role is a virtual identity to which policies can be attached. RAM roles do not have logon passwords or AccessKey pairs. A RAM role must be assumed by a trusted entity. The trust entity can be a RAM user, an Alibaba Cloud service, or an identity provider (IdP). If a trusted entity assumes a RAM role, the trusted entity can obtain and use an STS token of the RAM role to access the resources on which the RAM role has permissions.

1. Create a RAM role. For more information, see Create a RAM role for a trusted Alibaba Cloud account. The following table describes the parameters related to a sample RAM role.

   Parameter	Description
   Principal Type	Select Cloud Account.
   Principal Name	Select Current Account (UID).
   Role Name	The name of the RAM role. Example: ramslsrole.

2. After the RAM role is created, find the ramslsrole role on the Roles page and click the name of the RAM role. Then, view and record the Alibaba Cloud Resource Name (ARN) of the RAM role.

3. Create a custom policy on the JSON tab. For more information, see Create custom policies. The following table describes the parameters related to a sample custom policy.

   Parameter	Description
   Name	The name of the custom policy. Example: putlogspolicy.
   Description	The remarks.
   Policy Document	{ "Version": "1", "Statement": [ { "Action": [ "log:PostLogStoreLogs", "log:PutLogs" ], "Resource": "acs:log:*:*:project/slstestproject/*", "Effect": "Allow" } ] }

4. Attach the custom policy to the RAM role. On the Roles page, find the ramslsrole role and click Grant Permission in the Actions column.

   

Step 4: Build an app server

Sample programs in multiple programming languages are provided. You can download the programs at PHP, Java, Ruby, and Node.js.

1. Configuration file

   In the following example, each program package contains a file named config.json. The file contains the configuration information of the app server. You can modify the config.json file to modify configurations.

   {
       "AccessKeyID" : "",
       "AccessKeySecret" : "",
       "RoleArn" : "",
       "TokenExpireTime" : "900",
       "PolicyFile": "policy/write_policy.txt"
   }
                               

   Parameter	Description
   AccessKeyID	The AccessKey ID of the RAM user. Do not use the AccessKey ID of your Alibaba Cloud account. For more information about how to create a RAM user, see Create a RAM user and grant permissions to the RAM user.
   AccessKeySecret	The AccessKey secret of the RAM user. Do not use the AccessKey secret of your Alibaba Cloud account. For more information about how to create a RAM user, see Create a RAM user and grant permissions to the RAM user.
   RoleArn	The ARN of the RAM role. For more information about how to create a RAM role, see Create a RAM role and attach the required policies to the role.
   TokenExpireTime	The validity period of the token that is obtained by the mobile app. Minimum value: 900. Unit: seconds. You can retain the default value.
   PolicyFile	The file that describes the permissions of the token. You can retain the default value. The following files are most commonly used to describe the permissions of a token. The files are stored in the policy directory. You can also configure a file based on your business requirements. write_policy.txt: A token is granted the write permissions on the projects within an Alibaba Cloud account. When you use the write_policy.txt file, replace the project names in the file based on your business requirements. readonly_policy.txt: A token is granted the read permissions on the projects within an Alibaba Cloud account. The permissions of a token are the intersection of the permissions of the RAM role and the permissions described in the files. If you do not configure a file that describes the permissions of a token, the permissions of the RAM role is used as the permissions of the token.

2. Sample code

   For Java 1.7 or later, create a Java project after you download and decompress a program package. Copy the required dependency, code, and configurations to the project. Then, run the main function. By default, the program listens on port 7080 and waits for HTTP requests. You can perform the preceding operations for programs in a different language.

Step 5: Use direct data transfer to upload logs from a mobile app to Simple Log Service

{
  "StatusCode":"200",
  "AccessKeyId":"STS.3pdgagd****",
  "AccessKeySecret":"rpnwO9wr34tGdrddgsR2Y****",
  "SecurityToken":"CAES+wMIARKAAZhjH0EUOIhJMQBMjR****tZGVtbzI=",
  "Expiration":"2021-11-20T08:23:15Z"
}                          

const ALY = require("aliyun-sdk");

const sls = new ALY.SLS({
  accessKeyId: "Your temporary accesKeyId",
  secretAccessKey: "Your temporary accessKeySecret",
  securityToken: "Your sts token",
  endpoint: "http://cn-hangzhou.log.aliyuncs.com",
});

// -------------------------------
// put logs
// -------------------------------
const projectName = "your_project_name";
const logStoreName = "your_logstore";

const logGroup = {
  logs: [
    {
      time: Math.floor(new Date().getTime() / 1000),
      contents: [
        {
          key: "a",
          value: "1",
        },
        {
          key: "a",
          value: "2",
        },
        {
          key: "a",
          value: "3",
        },
      ],
    },
  ],
  topic: "vv",
  source: "127.0.0.1",
};

sls.putLogs(
  {
    // The following fields are required.
    projectName: projectName,
    logStoreName: logStoreName,
    logGroup: logGroup,
  },
  function (err, data) {
    if (err) {
      console.log("error:", err);
      return;
    }

    console.log("success:", data);
  }
);