OSS access logs
Object Storage Service (OSS) and Simple Log Service provide a real-time log query feature. You can use this feature to audit operations, analyze access requests, track anomalies, and locate issues for OSS. This topic describes the benefits, assets, billing, and limits of this feature.
Simple Log Service and OSS also offer the CloudLens for OSS application. The application offers a bucket-level view for centralized management. You can use it to visually analyze data such as resource usage, access analytics, anomaly detection, and security analysis. The application also provides scenario-based operations management for observability of bucket assets. For more information, see CloudLens for OSS.
Benefits
Logs are shipped to Simple Log Service in real time, with a typical latency of three minutes. You can also view real-time logs directly in the OSS console.
The log analysis feature includes predefined analysis reports to simplify data queries.
You can perform real-time query and analysis of raw logs. You can filter logs by criteria such as bucket name, object name, API operation, and time.
Asset details
Dedicated Project and Logstore
After you enable the real-time log query feature, the system automatically creates a dedicated Project named
oss-log-<Alibaba Cloud account ID>-<regionId>and a dedicated Logstore namedoss-log-storein the corresponding region.ImportantDo not delete the Project or Logstore for OSS access logs. Otherwise, logs cannot be shipped to Simple Log Service.
If you previously enabled the pay-by-ingested-data billing mode, the system creates a dedicated Logstore that uses this billing mode by default. To switch to the pay-by-feature billing mode, you can modify the Logstore configuration. For more information, see Modify Logstore configuration.
Dedicated dashboards
Four dashboards are generated by default.
NoteThe dedicated dashboards may be upgraded or updated at any time. Avoid modifying the dedicated dashboards. You can create custom dashboards to display query results. For more information, see Create a dashboard.
Dashboard
Description
Access Center
Displays overall operational information, including page views (PVs), unique visitors (UVs), traffic, and the geographic distribution of internet access.
Audit Center
Displays statistics on file operations, such as read, write, and delete operations.
Operation Center
Displays O&M information for OSS, including the number of requests and the distribution of failed operations.
Performance Center
Displays performance statistics for OSS, including the performance distribution of internet downloads and uploads, transfer performance across different networks and for different file sizes, and a list of file download differences.
Billing
If your Logstore uses the pay-by-feature billing mode, Simple Log Service does not charge for log storage or index traffic if the storage duration of OSS logs is 7 days or less and the daily write traffic (after compression) or index traffic does not exceed 900 GB. For reference, if a single access log is 1 KB, 900 GB is equivalent to approximately 900 million logs. If these limits are exceeded, Simple Log Service charges for the excess log storage and index traffic. For more information, see Billable items of the pay-by-feature mode.
If your Logstore uses the pay-by-feature billing mode, the real-time log query feature provides a monthly free quota of 16 × 31 shard-days. Simple Log Service charges for usage that exceeds this quota. For more information, see Billable items of the pay-by-feature mode.
If your Logstore uses the pay-by-feature billing mode, Simple Log Service charges standard fees for read traffic, internet traffic, data transformation, and data shipping for the dedicated Logstore. For more information, see Billable items of the pay-by-feature mode.
If your Logstore uses the pay-by-ingested-data billing mode, you are charged for internet read traffic only when data in Simple Log Service is accessed by third-party applications (non-Alibaba Cloud products). The fee is calculated based on the amount of data after compression. For more information, see Billable items of the pay-by-ingested-data mode.
Limits
You can only write OSS logs to the dedicated Logstore, and you cannot modify its indexes. However, features such as query, statistics, and alerting are not subject to special limits.
If your Alibaba Cloud account has an overdue payment, the real-time log query feature is suspended.
The real-time log query feature cannot be enabled for Anywhere Buckets.
Related reading
To enable the real-time log query feature, see Enable the real-time log query feature.
For more information about the data format of OSS access logs, see Log field details.