Transfer Log Collection

Full-link cloud data transfer monitoring encompasses the following phases: 1. Analyze the data transfer path between the database and the source and destination hosts using database audit logs. 2. Examine the data transfer path through the API Gateway based on API audit logs. 3. Assess and organize the data transfer paths between the hosts and gateways using API Gateway configurations. 4. Conduct full-link association analysis to measure and map the complete data transfer path on the cloud in real time.

DSC collects logs from applications (including DBSS and API Data Security Protection) to assist in tracking data flow and promptly identifying exceptions and risks.

Prerequisites

The DBSS service has been enabled and a database instance has been installed.
An API data security instance has been created.

Enabling Transfer Log Collection

Log in to the management console.
Click in the upper left corner of the management console and select a region or project.
In the navigation tree on the left, click . Choose Security & Compliance > Data Security Center .
In the navigation pane, choose Policy Center > Transfer Log Collection. The Data Transfer page is displayed.

Table 1 describes the parameters in the instance list.

**Table 1** Instance list
Parameter	Description
Instance Name/ID	Instance name of the interconnected microservice, for example, DBSS or API Data Security Protection. If no instance is available, buy one.
Instance Type	Instance type, which can be DBSS or ADG.
Instance Status	Status of an instance Not Opened: Data transfer log collection is not enabled. Opening: Data transfer log collection is being enabled. Open Failed: Failed to enable data transfer log collection. Running: Data transfer log collection is enabled successfully. Offline: The instance status is abnormal and no heartbeat message is received. Disabling Failed: Failed to disable data transfer log collection. Disabling: Data transfer log collection is being disabled. Abnormal: The instance status is abnormal.
Last Heartbeat Time	Time when DSC was connected to the instance last time.
Data Transfer Log Collection Status	Click to enable log collection.

Click to enable log collection. If the Status is Enabling, the collection function is being enabled. If the Status is Running, the collection function is enabled successfully.

Click Batch Enable Transfer Collection in the upper left corner to enable transfer log collection in batches.

Disabling Transfer Log Collection

Log in to the management console.
Click in the upper left corner of the management console and select a region or project.
In the navigation tree on the left, click . Choose Security & Compliance > Data Security Center .
In the navigation pane, choose Policy Center > Transfer Log Collection. The Data Transfer page is displayed.

Table 2 describes the parameters in the instance list.

**Table 2** Instance list
Parameter	Description
Instance Name/ID	Instance name of the interconnected microservice, for example, DBSS or API Data Security Protection. If no instance is available, buy one.
Instance Type	Instance type, which can be DBSS or ADG.
Instance Status	Status of an instance Not Opened: Data transfer log collection is not enabled. Opening: Data transfer log collection is being enabled. Open Failed: Failed to enable data transfer log collection. Running: Data transfer log collection is enabled successfully. Offline: The instance status is abnormal and no heartbeat message is received. Disabling Failed: Failed to disable data transfer log collection. Disabling: Data transfer log collection is being disabled. Abnormal: The instance status is abnormal.
Last Heartbeat Time	Time when DSC was connected to the instance last time.
Data Transfer Log Collection Status	Click to enable log collection.

Click to disable log collection.

Click Disabling Transfer Collection in Batches in the upper left corner to disable transfer log collection in batches.