This document describes how to get started with CLS.
1. CLS Basics
2. CLS Billing Modes
CLS provides a daily pay-as-you-go billing option in all the supported regions. You pay for what you use and no upfront payment is required. For more information, please see Product Pricing. 3. Getting Started
Step 1. Activate CLS
First, you need to activate CLS at the Tencent Cloud official website. Step 2. Download and install LogListener
LogListener is a client that collects log data and sends it to CLS in a fast and non-intrusive way. You can install it as follows: Checking the network connection
To install LogListener, the source server and the CLS region must be able to connect to each other. Tencent's Cloud Virtual Machine (CVM) accesses CLS via a private network by default.
You can run the following command to check the network connectivity, where <region>
is the abbreviation for the CLS region. For more information about regions, please see Available Regions. ping <region abbreviation>.cls.tencentyun.com
Viewing/Creating a key pair
Log in to the CAM console, view (or create) a key pair, and make sure that the key is enabled. Installing LogListener
In this example, the CLS service runs in the CVM CentOS 7.2 (64-bit) environment. To download and install LogListener, see LogListener Installation Guide. Step 3. Create a log topic
CLS service is differentiated by region. To lower network latency, try to create log resources in a CLS region closest to your business region. For supported regions, see Available Regions. Log resource management involves the management of logsets and log topics. A logset represents a project, while a log topic represents a type of service. A single logset may contain multiple log topics. 2. On the left sidebar, click Log Topic to go to the log topic management page.
3. Select a region and click Create Log Topic.
4. Configure as needed on the page that is displayed.
Log topic name: name of the log topic, such as topic_test.
Logset Operation: Select an existing logset is selected by default. Alternatively, you can select Create Logset and set the logset name (e.g., cls_test) as needed.
5. Click OK.
A created log topic will be displayed in the log topic list.
You can click Manage Logset to view the created logset on the logset list page.
Step 4. Create a machine group
CLS uses a machine group to manage a list of log source machines.
Log in to the CLS console and click Machine Group Management on the left sidebar. Select the appropriate region at the top of the page and click Create Machine Group. A machine group can contain multiple machine IPs (one IP per line). For CVM, enter the private IP directly. For more information, see Machine Group Management. After a machine group is created, click View in the machine group list to check the connection between the LogListener client and servers. If the status is normal, the LogListener client is successfully connected to CLS; otherwise, see Machine Group Exception for troubleshooting. 2. On the left sidebar, click Log Topic to enter the log topic management page.
3. On the log topic management page, click Collection Configuration, specify a collection path and parsing mode for the log topic, and bind the log topic to a machine group.
Note:
This step takes the LogListener-based log collection method as an example. For more information, please see Collection Methods. Binding a machine group
Select an existing machine group, and associate it with the current log topic. Then, LogListener will monitor the log files in this machine group according to the rules you set. You may bind a log topic to multiple machine groups, but a log file will only be collected into one log topic.
Configuring a collection path
The collection path needs to match the absolute path of the log file on the server. You are required to enter two parameters: the directory prefix and the file name in the format of [directory prefix expression]//**//[file name expression]. LogListener matches all paths with common prefixes that satisfy the [directory prefix expression], and monitors all log files under these directories (including subdirectories) that satisfy the [file name expression]. The parameters are described as follows:
|
| Directory prefix for log files, which supports only the wildcard characters \\* and ? * indicates to match any multiple characters. ?` indicates to match any single character. |
| Current directory and all its subdirectories. |
| Log file name, which supports only the wildcard characters \\* and ? . \\* indicates to match any multiple characters. ? indicates to match any single character. |
For example, if the absolute path of the file to be collected is /cls/logs/access.log
, then the directory prefix entered for the collection path should be /cls/logs
, and the file name access.log
, as shown below:
Configuring a parsing mode
CLS supports various log parsing modes such as full text in a single line, separator, JSON, and full regex. The following log sample uses the separator mode (for more information, please see Separator Format). Tue Jan 22 14:49:45 2019;download;success;194;a31f28ad59434528660c9076517dc23b
Selecting an extraction mode
Select Separator
for the Extraction Mode, and Semicolon
for the log separator.
Inputting a sample log and extracting key-value pairs
Enter a complete log in the log sample field, and key-value pairs will be automatically extracted. Then, you can define a unique key for each key-value pair.
In this example, the log is parsed into Tue Jan 22 14:49:45 2019
, download
, success
, 194
, and a31f28ad59434528660c9076517dc23b
. The keys defined for these 5 fields are time
, action
, status
, size
, and hashcode
respectively. LogListener will then use this defined structure to collect data.
Step 6. Search for logs
Configuring an index
CLS offers a log search and analysis feature based on segment indexing. We currently offer two index types: full-text index and key-value index. They can be managed on the index configuration tab on the log topic management page. Both index types can be enabled at the same time.
|
| Breaks a full log into segments by delimiter, and executes keyword query based on the segments. |
| Breaks a full log into key-value pairs according to the specifications, and executes field query based on the key-value pairs. |
This section uses the key-value index as an example to describe how to configure indexes. On the log topic management page, click Index Configuration to enter the index management page. Click Edit and toggle the key to enable index status. Toggle on Key-Value Index. Click Add to add keys. Select a field type for each key. Currently, long
, double
, and text
are supported. text
allows you to specify delimiters, which divide a character string into segments. In the above example, enter time
, action
, status
, size
, and hashcode
as key-value indexes, and set the field type of size
to long
.
Once the index rule is enabled, indexes will be created for new input data accordingly, and stored over a specified period of time depending on your configured storage cycle. Only logs for which indexes have been created can be queried for analysis. Therefore, modifying an index rule or disabling an index only affects new input data. Unexpired legacy data will still be searchable.
Log search
2. On the left sidebar, click Search and Analysis to enter the search and analysis page.
3. Select the target region, log topic, and time range, and enter the search statement (the syntax can be search by keyword, fuzzy match, and range). For more information, see Configuring Index. Click Search and Analysis to begin log search. Sample 1: Querying failure logs
Search statement: status:fail
Sample 2: Querying logs of downloaded files over 300 KB
Search statement: action:download and size>300
Step 7. Ship logs to COS
CLS can ship logs to Cloud Object Storage (COS) for long-term storage at a low cost. This also enables you to perform big data analysis offline.
To ship logs to COS, perform the following steps:
3. On the log topic management page, click Shipping Configuration to enter the shipping configuration page.
4. Click Add Shipping Configuration to create a shipping task.
Currently, CLS supports shipping in CSV format and JSON format. Once you create a shipping task, CLS asynchronously ships data to the destination bucket. You can view the shipping status by clicking Shipping Task on the left sidebar of the console. 4. Overview of Console Features
|
Manage logsets in the console | |
Manage log topics in the console | |
Learn about machine groups | |
Configure and enable indexes | |
Select an appropriate chart type to display the analysis results as needed | |
Set alarm policies for one or more log topics to send alarm notifications when the query and analysis results meet the trigger condition, so as to find exceptions in time. | |
View multiple statistical charts of query and analysis results in the dashboard. | |
Cleanse, distribute, and structure logs, similar to using the open-source Logstash. | |
Perform scheduled SQL analysis, that is, periodic log query and analysis tasks, and save the results to new log topics, usually in log (to reduce storage costs) and report aggregation scenarios. | |
Ship log data to COS to further meet the needs of log scenarios and unlock the value of log data | |
Use CKafka instances to consume log topic data | |
Understand authorization configuration in different operation scenarios | |
5. FAQs
LogListener
Log search
6. Feedback and Suggestions
If you have any doubts or suggestions when using CLS products and services, you can submit your feedback through the following channels. Dedicated personnel will contact you to solve your problems.
For questions about the product documentation, such as links, content, or APIs, click Send Feedback on the right of the document page.
Was this page helpful?