Enable control plane log collection and alerting (new version)

Enable control plane log collection

1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose Observability Management Center > Log Center.

3. On the Log Center page, click the Control-Plane Logs tab. Select New project or Use existed project, configure the relevant parameters, and then click Enable Control-Plane Log Collection. In the Submit dialog box, click OK.

   After logs are collected to Simple Log Service (SLS), you can perform the following operations:

   • View control plane logs on the console. For more information, see View control plane logs.

   • Enable log-based alerting to promptly detect control plane issues. For more information, see Configure log-based alerting for the control plane.

View control plane logs

After enabling control plane log collection, logs from the managed control plane are collected to Simple Log Service (SLS). You can view or query control plane logs in the SLS console or on the ASM console's integrated log browser.

Configure control plane log alerts

After enabling control plane log collection, you can configure log-based alerting for the control plane.

1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

2. On the Mesh Management page, click the name of the target ASM instance. In the left-side navigation pane, choose Observability Management Center > Log Center.

3. On the Log Center page, click the Control-Plane Logs tab, and then click Alert Setting in the upper-left corner.

4. In the Control-Plane Alert Setting dialog box, select an Action Policy as needed and click Enable Alert. In the Note dialog box, click Submit.

   An Action Policy defines how to send notifications when an alert is triggered. Two types are supported: ASM Built-in Action Strategy and Custom action strategy. For more information, see action policy. By default, the ASM built-in action policy does not have any notification channels configured. You can click the icon and follow the instructions to open the Simple Log Service alert center and configure the channels. If an alert is triggered, refer to Solutions.

Configure alert contacts

You can configure the built-in action policy for the SLS service gateway to set alert notification recipients, notification templates, and other settings.

1. Log on to the Simple Log Service console.

2. In the Project List area, click the target project name, and then in the navigation pane on the left, click Alerting.

3. On the Alert Center page, click Notification Recipient > User Group Management.

4. On the User Group Management tab, click Modify in the Actions column of the SLS Service Mesh Built-in User Group.

5. In the Modify User Group dialog box, select the target member in the Available Members area, click the icon to add the member to the Added Members area, and then click Confirm.

Triggered alert notification example

1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose ASM Gateways > Gateway. On the page that appears, click Create from YAML.

3. On the Create page, select the target namespace and a scenario template, and then configure the YAML.

   This example uses the default namespace to configure an ASM Gateway. The following is a sample YAML configuration:

   apiVersion: networking.istio.io/v1beta1
   kind: Gateway
   metadata:
     name:  gateway-test
     namespace: default
   spec:
     selector:
       istio: ingressgateway
     servers:
       - hosts:
           - '*console.aliyun.com'
         port:
           name: https
           number: 443
           protocol: HTTPS
         tls:
           credentialName: not-existing-credential
           mode: SIMPLE

4. View the alert notification.

   1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

   2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose Observability Management Center > Log Center.

   3. On the Log Center page, click the Control-Plane Logs tab and search for ACK ERROR to view the alert information.

      If you have configured an email address for your alert contacts, you can also check your email for the alert notification.

Solutions