Managing Log Access Rules

Prerequisites

• You have created a log group and log stream. For details, see Creating Log Groups and Log Streams. You can also directly create them on the Add Access Rule page.
• You have created a cluster, namespace, and workload. For details, see Cloud Container Engine (CCE) User Guide.

Constraints

Configured log access rules into LTS might impact log data in LTS and result in additional fees. Exercise caution.

Configuring Access Rules

To map the logs of CCE, CCI, or custom clusters in AOM to LTS, perform the following steps:

1. Log in to the AOM 2.0 console.
2. In the navigation pane, choose Log Analysis > LTS Access.
3. Click Add Access Rule.
4. Select an access type. Access by Namespace, Access by Workload, or Automatic Mapping are available.
   • Access by Namespace: All logs of the selected namespace are connected to the specified log stream.
     1. Rule Name: Enter a rule name. Only letters, digits, hyphens (-), underscores (_), and periods (.) are allowed.
     2. Cluster: Select a cluster from the drop-down list.
     3. Namespace: Select a namespace from the drop-down list.
     4. Workload: Retain the default value All.
     5. Container Name: Select a container from the drop-down list box.
     6. Set an access rule. If no log group or stream meets your requirements, click Add Log Group and Add Log Stream to add ones. After creating a log stream, select an enterprise project.
        • Access all logs: If you select this option, select a log group and log stream.
        • Specify log paths: If you select this option, specify a log path and then select a log group and log stream.
   • Access by Workload: Logs of the selected workload are connected to the specified log stream.
     1. Rule Name: Enter a rule name. Only letters, digits, hyphens (-), underscores (_), and periods (.) are allowed.
     2. Cluster: Select a cluster from the drop-down list.
     3. Namespace: Select a namespace from the drop-down list.
     4. Workload: Select one or more workloads from the drop-down list.
     5. Container Name: Select a container from the drop-down list box.
     6. Set an access rule. If no log group or stream meets your requirements, click Add Log Group and Add Log Stream to add ones. After creating a log stream, select an enterprise project.
        • Access all logs: If you select this option, select a log group and log stream.
        • Specify log paths: If you select this option, specify a log path and then select a log group and log stream.
   • Automatic Mapping: Workload logs are automatically connected to the generated log streams with the same names as the workloads.
     1. Rule Name: Enter a rule name. Only letters, digits, hyphens (-), underscores (_), and periods (.) are allowed.
     2. Namespace: Select a namespace from the drop-down list.
     3. Workload: Select one or more workloads from the drop-down list.

        If you select one workload, the rule name is changed to Custom rule name_0 after the rule is created, for example, test_0. If you select multiple workloads, the rule names are changed to Custom rule name_0, Custom rule name_1, and so on, such as test_0 and test_1.

     4. Set an access rule: Select a log group and an enterprise project, and specify a log stream prefix. A log stream will be generated based on the log stream prefix and workload name. By default, all logs of the selected workload are connected.

Other Operations

On the LTS Access page, you can search for, view, edit, and delete access rules.