Enabling Access to LTS Logs

Scenario

You can enable access to logs in Log Tank Service (LTS) for real-time decision-making and analysis, device O&M management, and service trend analysis.

This topic describes how to enable access to LTS.

Enabling Access to LTS Logs

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. Select an LTS log group and log stream.
   1. In the upper left corner of the page, click and choose Management & Deployment > Log Tank Service.
   2. Click Create Log Group in the upper right corner of the page.
   3. On the Create Log Group page, enter a log group name and click OK.

      Retain default values for other parameters.

   4. Click the name of the created log group and click Create Log Stream.
   5. On the Create Log Stream page, enter a log stream name and click OK.

      Retain default values for other parameters.

4. Configure LTS-VPC log information.
   1. Click in the upper left corner of the page and choose Networking > Virtual Private Cloud.
   2. In the navigation pane on the left, choose VPC Flow Logs. In the upper right corner of the page, click Create VPC Flow Log.
   3. Configure VPC flow log parameters.

      Table 1 VPC flow log parameters

      Parameter	Description
      Name	Name of the VPC flow log.
      Resource Type	Select VPC.
      Resource	Select a VPC from the drop-down list.
      Filter	Select All traffic.
      Log Group	Select the log group created in 3.
      Log Stream	Select the log stream created in 3.
      (Optional) Description	Provides a description of the VPC flow log.

   4. Click OK.

5. Configure LTS-APIG log information.
   1. In the upper left corner of the page, click and choose Business Applications > Application & Data Integration Platform ROMA Connect.
   2. Click Create ROMA Connect Instance in the upper right corner of the page.
   3. On the displayed page, disable Public Access and configure other parameters based on your needs or retain their default values. Then, click Create Now.
   4. Click the name of the ROMA Connect instance to go to its details page.
   5. In the navigation pane on the left, choose API Connect > Monitoring & Analysis. On the displayed page, click the Log Analysis tab.
   6. On the Log Analysis tab, click Configure Log Collection.
   7. In the displayed dialog box, enable log collection, select the log group and log stream created in 3, and click OK.

6. Enable access to LTS in SecMaster.
   1. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
   2. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
      Figure 1 Workspace management page
      
   3. In the navigation pane on the left, choose Settings > Data Integration. On the displayed page, click Enable Log Tank Service (LTS) on the right.
   4. On the page displayed, set log parameters.

      Table 2 Log parameters

      Parameter		Description
      Basic Information	Log Name	Set the name of the LTS log to be connected.
      	Log Group	Select the log group created in 3.
      	Log Stream	Select the log stream created for the 3.
      Pipeline Settings	Pipeline Name	Select the pipeline for logs to be accessed.
      	Pipeline Alias	Set the alias of the pipeline for logs to be accessed.

   5. Click OK.

Viewing Logs and Storage Locations

After log integration, choose Security Analysis > Security Data Tables and view integrated logs.

1. In the navigation pane on the left, choose Log Audit > Security Data.
2. In the data space navigation tree on the left, click a data space name to show the pipeline list. Click a pipeline name. On the page displayed on the right, you can search the pipeline data.

   You can view the integrated logs on the pipeline data query page.