View raw logs

Procedure

1. Log in to the Security Center console.

2. In the left navigation bar, select Risk Governance > Log Analysis. In the upper-left corner of the console, select the region where the asset you want to protect is located: Chinese Mainland or Outside Chinese Mainland.

3. On the left side of the Raw Logs tab, click a field to automatically add it to the Search & Analyze search box.

   Note

   For example, if you click the aegis-log-process field, the field appears in the search box. Click Search & Analyze to view all logs related to this field.

   

4. The Raw Logs tab provides the following additional operations:

   • In the field list on the left:

     

     • In the Displayed Fields area, click the icon next to a field to remove it. This removes the field from both the Display Style list and the log details on the right.

     • In the Indexed Fields area, click the icon next to a field to add it to the Displayed Fields list, making it also appear in the log details on the right.

     • : View the field's Basic Distribution and Statistical Metrics.

     • : Save the current layout of Displayed Fields as a custom view, which you can then select from the drop-down list at the top.

     • > Tag Settings:: Set the field as a system tag.

     • > Alias: Replace field names with their configured aliases. Fields without an alias retain their original names.

   • In the data display area on the right:

     

     • In the Raw Data list:

       • : Copy the log content.

       • : Use SLS Copilot to summarize log content, find errors, and more.

     • : Export logs by selecting a time range and download tool. For detailed instructions, see export logs.

     • > JSON Configurations: Set the JSON display type and expansion level.

     • > Event Settings: Configure events for raw logs. For details, see Event Settings.