Field | Description |
Name | Enter a name for the flow log to be created. |
Collection Range | Multiple collection ranges are supported currently. Cross-region CCN traffic is selected here. |
CCN | CCN instance ID. |
Collection Type | Select the type of traffic to be collected by the flow log: all traffic, or the traffic rejected or accepted by security groups or ACL. |
Logset | Specify the storage location in CLS for flow logs. If you already have a logset, select it directly; otherwise, keep Created by System selected, so that the system will create one for you. You can also click Create to create one in the CLS console. |
Log Topic | Specify the minimum dimension of log storage, which is used to distinguish between different types of logs, such as `Accept` log. If you already have a log topic, select it directly; otherwise, keep Created by System selected, so that the system will create one for you. You can also go to the CLS console to create one. Note: For more information on how to configure a logset, log topic, and index, see Creating Logsets and Log Topics. |
Tag Key | Click Advanced Options to enter or select a tag key for the identification and management of flow logs. |
Tag Value | Click Advanced Options to enter or select a tag value. It can also be left empty. |
srcaddr dstregionid dstport start dstaddr version packets ccnid protocol srcregionid bytes action region-id srcport end log-status
Field | Data Type | Description |
srcaddr | text | Source IP. |
dstregionid | text | Traffic destination region. |
dstport | long | Traffic destination port. This field will take effect only for UDP/TCP protocols and will be displayed as "-" for other protocols. |
start | long | The timestamp when the first packet is received in the current capture window. If there are no packets in the capture window, it will be displayed as the start time of the capture window in Unix seconds. |
dstaddr | text | Destination IP. |
version | text | Flow log version. |
packets | long | Number of packets transferred in the capture window. This field will be displayed as "-" when log-status is NODATA. |
ccnid | text | |
protocol | long | |
srcregionid | text | Traffic source region. |
bytes | long | Number of bytes transferred in the capture window. This field will be displayed as "-" when log-status is NODATA. |
action | text | Operation associated with the traffic:
ACCEPT: Cross-region traffic normally forwarded over CCN.
REJECT: Cross-region traffic prevented from being forwarded due to traffic throttling. |
region-id | text | Region where logs are recorded. |
srcport | text | Traffic source port. This field will take effect only for UDP/TCP protocols and will be displayed as "-" for other protocols. |
end | long | The timestamp when the last packet is received in the current capture window. If there are no packets in the capture window, it will be displayed as the end time of the capture window in Unix seconds. |
log-status | text | Logging status of the flow log. Valid values:
OK: Data is normally logged to the specified destination.
NODATA: There was no inbound or outbound network flow in the capture window, in which case both the packets and bytes fields will be displayed as -1. |
srcregion
and dstregion
in CLS. For more information, see Context Search and Analysis.
Was this page helpful?