Updated on 2023-11-29 GMT+08:00

Transferring Logs to DIS

DIS provides both log storage and big data analysis. It can perform offline analysis, and transmit a large number of log files to the cloud for backup, query, and machine learning. You can also use it for data recovery and fault analysis on data losses or exceptions. During transfer, a large number of small text files can be merged into large files to accelerate data processing. Select DIS to transfer logs based on your service scenario.

Prerequisites

  • Logs have been ingested to LTS.
  • You have purchased a DIS stream.

Procedure

  1. Log in to the LTS console and choose Log Transfer in the navigation pane on the left.
  2. Click Create Log Transfer in the upper right corner.
    Figure 1 Creating a transfer task (DIS)
  3. On the displayed page, configure the log transfer parameters.

    After a transfer task is created, you can modify parameters except the log source account, agency name, delegator account name, log group name, enterprise project, and transfer mode.

    Table 1 Transfer parameters

    Parameter

    Description

    Example Value

    Log Source Account

    • Current: Logs of the current account will be transferred.
    • Other: Logs of the delegator account will be transferred. Ensure that the delegator has created an agency for log transfer delegation. For details, see Creating an Agency.

    Current

    Agency Name

    This parameter is required when Log Source Account is set to Other. Enter the name of the IAM agency created by the delegator.

    N/A

    Delegator Account Name

    This parameter is required when Log Source Account is set to Other. Enter the account name of the delegator.

    N/A

    Whether to Enable Transfer

    Whether log transfer is enabled.

    Enabled

    Transfer Destination

    Select a cloud service for log transfer.

    DIS

    Log Group Name

    Select a log group.

    N/A

    Enterprise Project Name

    Select an enterprise project.

    • This parameter is displayed only when the enterprise project function is enabled for the current account.
    • If the enterprise project function is enabled for the current account:
      • All enterprise projects under the current account are displayed in the drop-down list when Log Source Account is set to Current.
      • default is displayed when Log Source Account is set to Other and the enterprise project function is not enabled for the delegator account.
      • All enterprise projects under the delegator account are displayed when Log Source Account is set to Other and the enterprise project function is enabled for the delegator account.

    N/A

    Log Stream Name

    Select a log stream.

    NOTE:

    Log streams that have been configured with DIS transfer settings cannot be configured again.

    N/A

    DIS Stream Name

    Select a DIS stream. If no streams are available, click View DIS Streams to access the DIS console and create a stream.

    N/A

    Format

    The storage format of logs. The value can be Raw Log Format or JSON.

    • Examples of the raw log format:
      (Logs displayed on the LTS console are in the raw format.)
      Sep 30 07:30:01 ecs-bd70 CRON[3459]: (root) CMD (/opt/oss/servicemgr/ICAgent/bin/manual/mstart.sh > /dev/null 2>&1)
    • The following is an example of the JSON format:
      {"host_name":"ecs-bd70","ip":"192.168.0.54","line_no":249,"message":"Sep 30 14:40:01 ecs-bd70 CRON[4363]: (root) CMD (/opt/oss/servicemgr/ICAgent/bin/manual/mstart.sh > /dev/null 2>&1)\n","path":"/var/log/syslog","time":1569825602303}

    JSON

    Transfer Cycle

    Logs are transferred to the DIS stream in real time.

    Real time

    Filter by Tag Fields

    During transfer, logs will be filtered by tag fields collected by ICAgent.

    • Disabled: Logs will not be filtered by tag fields.
    • Enabled: Default tag fields include those for hosts (hostIP, hostId, hostName, pathFile, and collectTime) and for Kubernetes (clusterName, clusterId, nameSpace, podName, containerName, and appName). Optional public tag fields are regionName, logStreamName, logGroupName, and projectId.
      NOTE:

      When Filter by Tag Fields is enabled, Format must be JSON.

    • Filter by Tag Fields: When this parameter is enabled, logs will be filtered by tags.

    Enabled

  4. Click OK. When the log transfer status changes to Normal, the transfer task has been created. If you transfer logs of another account, the log group and stream belong to the delegator. When you click the name of the delegator's log group or stream on the Log Transfer page, you will be directed to the log group or stream through the agency.
  5. Click the DIS stream name in the Transfer Destination column to access the DIS console and view transferred log files.
    Transferred logs can be downloaded from DIS to your local computer for viewing.

    To delete the transfer task, log in to the DIS console, choose Stream Management, and select the DIS instance to go to the instance details page. Delete the upload permission under Permissions.