- Release Notes and Announcements
- Product Introduction
- Purchase Guide
- Getting Started
- Public NAT Gateway Operation Guide
- Private NAT Gateway Operation Guide
- Practical Tutorial
- Enabling Cross-VPC Access to Public Network via Standard NAT Gateway
- Enabling Mutual Access between a Specified VPC Subnet and Public Network Resources via Private NAT Gateway
- Enabling Secure Mutual Access with Public Network via Public CLB and NAT Gateway
- Adjusting the Priorities of NAT Gateways and EIPs
- API Documentation
- FAQ
- Service Level Agreement
- Contact Us
- Glossary
- Release Notes and Announcements
- Product Introduction
- Purchase Guide
- Getting Started
- Public NAT Gateway Operation Guide
- Private NAT Gateway Operation Guide
- Practical Tutorial
- Enabling Cross-VPC Access to Public Network via Standard NAT Gateway
- Enabling Mutual Access between a Specified VPC Subnet and Public Network Resources via Private NAT Gateway
- Enabling Secure Mutual Access with Public Network via Public CLB and NAT Gateway
- Adjusting the Priorities of NAT Gateways and EIPs
- API Documentation
- FAQ
- Service Level Agreement
- Contact Us
- Glossary
NAT Gateway provides the flow log collection feature to collect and analyze NAT Gateway traffic and generate logs and analysis charts. This helps you stay informed of cross-region communication and quickly locate and solve problems based on the logs, thus improving the business availability and Ops efficiency.
Note:
The flow log feature is in beta test. To try it out, submit a ticket for application.
The Flow Log service is free of charge, but the data stored in CLS will be charged at the standard prices of CLS.
The flow log data is stored in CLS. Make sure that you have granted the Flow Log service permissions to access CLS before querying log data in CLS.
Directions
1. Log in to the VPC console and select Flow Logs > Log List in the left sidebar.
2. Select the region in the top-left corner of the Flow Logs page and click +Create.
3. Configure the following parameters in the Create flow log window.
Field | Description |
Name | The name of the flow log. |
Collection range | Select “NAT Gateway”. |
NAT gateway | The information about the NAT gateway. |
Collection type | Specify the type of traffic to be collected by the flow log: All traffic, or the traffic rejected or accepted by security groups or ACL. |
Logset | Specify the storage location in CLS for flow logs. If you already have a logset, select it directly; otherwise, keep Created by system selected, so that the system will create one for you. You can also click Create to create one in the CLS console. |
Log topic | Specify the minimum dimension of log storage, which is used to distinguish between different types of logs, such as `Accept` log. If you already have a log topic, select it directly; otherwise, keep **Created by system** selected, so that the system will create one for you. You can also go to the CLS console to create one. Note: For more information on how to configure a logset, log topic, and index, see Creating Logsets and Log Topics. |
Tag key | Click Advanced options to enter or select a tag key for the identification and management of the flow log. |
Tag value | Click Advanced options to enter or select a tag value. It can also be left empty. |
4. Click OK.
Note:
You can view the record of a newly created flow log in CLS after six minutes upon the creation (one minute for the capture window and five minutes for data publishing).
5. After about six minutes, click Storage location or View to enter the Search and analysis page of the CLS service, select the region and time period for which to view logs, and click Search and analyze to view the logs.
Note:
Yes
No
Was this page helpful?