Log shipping allows you to send logs to CLS and CKafka, helping you gain more out of logs and meet user needs for operation and maintenance. To ship custom fields for your access logs, submit a ticket.
1. Log in to the WAF console. Select Access Logs/Attack Logs on the left sidebar and the Log shipping tab.
2. If you have not activated CLS, click Activate now. For details, see Cloud Log Service.
3. Authorize WAF to ship data to CLS.
3.1 In the Shipping to CLS section, click Configure.
3.2 In the pop-up window, click Authorize now.
3.3 On the CAM authorization page, click Authorize to allow WAF to ship logs to CLS. If you encounter problems during the process, see Cloud Access Management.
3.4 Return to the log shipping page and click Configure now. Select the shipping region and log topic and then click OK. Alternatively, click Create to automatically create a WAF logset waf_post_logset. See the CLS console for details.
3.5 After logs are sent to CLS, you can enable log shipping for the desired domain names. For details, see Enabling Log Shipping.
You have purchased CKafka instances, and set the instance bandwidth based on actual log usage.
A ticket is required for connecting your supported environment to CKafka.
Directions
1. Log in to the WAF console. Navigate to Access Logs>Log shipping.
2. Authorize WAF to ship logs to the specified CKafka instance.
2.1 On the log shipping page, click Configure now to open an authorization pop-up window.
2.2 In the pop-up window, click Authorize now.
2.3 On the CAM authorization page, click Authorize to allow CKafka to send data to WAF. If you encounter problems during the process, see Cloud Access Management.
2.4 After the authorization is complete, go back to the log shipping page and click Configure now.
3. In the pop-up window, set the required parameters and click OK.
Supportive environment: Select Tencent Cloud products that you purchased and can be used with CKafka, and then select a CKafka instance and IP port.
Parameter
Description
Remarks
Region
For more information about CKafka supported regions, see Regions and AZs.
To connect your supportive environment to CKafka, submit a ticket.
Instance
The CKafka instance running in the current region.
Topic ID/name
The topic ID and name.
Supportive environment
The route specified to connect the supportive environment.
Public domain name: Select a CKafka instance and public domain name and enter the username and password of the instance.
Parameter
Description
Region
For more information about CKafka supported regions, see Regions and AZs.
Instance
The CKafka instance running in the current region.
Topic ID/name
The topic ID and name.
Supportive environment
The route specified to connect the supportive environment.
Username
The SASL username.
Password
The SASL password.
4. After logs are sent to CKafka, you can enable log shipping for the desired domain names.
Yes
No
Was this page helpful?