AI 助理
备案控制台
官方文档
输入文档关键字查找
首页 云安全中心 操作指南 威胁分析与响应 响应编排 流程组件说明 SLS组件

SLS组件

更新时间：
产品详情
我的收藏

SLS组件主要提供SLS日志查询和写入功能。

功能描述

动作

描述

使用场景

run_query

查询SLS日志。

查询SLS日志。

putLogs

向SLS中写入日志。

向SLS中写入日志。

组件配置示例

本文提供了SLS组件各动作的参数配置示例，您可将其作为测试剧本导入。通过可视化流程编辑器，能更直观地了解和测试各动作的配置参数，轻松掌握组件的功能逻辑与使用方式。操作步骤可参考剧本导入。

说明

请先将示例数据保存为JSON文件，再导入编辑器中。

示例数据

{
    "cells": [
        {
            "shape": "custom-edge",
            "zIndex": 1,
            "id": "SequenceFlow_0yvd0ew",
            "data": {
                "nodeType": "sequenceFlow",
                "appType": "basic",
                "icon": "icon-upper-right-arrow",
                "isRequired": false
            },
            "labels": [],
            "isNode": false,
            "source": {
                "cell": "Action_15qsqhz"
            },
            "target": {
                "cell": "32124b94-ecd0-4370-9878-c08676bacde4"
            },
            "vertices": []
        },
        {
            "position": {
                "x": -560,
                "y": 0
            },
            "size": {
                "width": 137,
                "height": 66
            },
            "view": "react-shape-view",
            "shape": "activity",
            "id": "Action_15qsqhz",
            "zIndex": 1,
            "data": {
                "nodeType": "action",
                "appType": "component",
                "nodeName": "SLS_1",
                "valueData": {
                    "query": "*",
                    "limit": "10",
                    "project": "test_project",
                    "from": "<%=currentTimeToMs()- 100 * 60 * 1000L%>",
                    "to": "<%=currentTimeToMs()%>",
                    "logstore": "test_logstore",
                    "endpoint": "cn-shangzhou.log.aliyuncs.com"
                },
                "icon": "https://sophon-gen-v2.oss-cn-zhangjiakou.aliyuncs.com/componentUpload/1641804391435_SLS_logo.svg?Expires=1745566401&OSSAccessKeyId=STS.NVuDNZvKqtwuTJkfJtY******&Signature=s3Rr36HjjDz%2Bqu5wx%2FaTAtTR0dc%3D&security-token=CAIS2AJ1q6Ft5B2yfSjIr5XAD%2FTum5RQw7WeVmzagkohVbkU2PzZrDz2IHhMenFpAegcv%2Fw%2BlGFZ6%2F8elrp6SJtIXleCZtF94oxN9h2gb4fb40wIXRWK0s%2FLI3OaLjKm9u2wCryLYbGwU%2FOpbE%2B%2B5U0X6LDmdDKkckW4OJmS8%2FBOZcgWWQ%2FKBlgvRq0hRG1YpdQdKGHaONu0LxfumRCwNkdzvRdmgm4NgsbWgO%2Fks0OP3AOrlrBN%2Bdiuf8T9NvMBZskvD42Hu8VtbbfE3SJq7BxHybx7lqQs%2B02c5onDWwAJu0%2FXa7uEo4wydVNjFbM9A65Dqufxn%2Fpgt%2Braj4X7xhhEIOVJSSPbSZBbSxJNvU1RXDxQVcEYWxylurjnXvF%2Bo5q63vwUGin%2B2svzhw6RGJ1dq8DgINtD0jokjPndRVbLXs84nxS7gbsGn76oY2zradH%2FdU4il8CyMytAXxqAAZDNL%2FMfqwnfpUW9RMOXa9Q0%2FU5jug3GzZT64g7TdTWpUYEW9f10E3bF%2BHv5B%2Bd9c5yYLrOjVRiwJ7hkN8GRS67b55hST1lWccu6vd%2FKBk9qxZbSc02pD7ymERlhj7sts0FXMLuYlYqc%2BSSGF8vK0GW%2F%2FST%2FLdOTF2wDJB4C9oTCIAA%3D",
                "advance": {
                    "inputParamMode": false,
                    "onError": "stop_cur_flow",
                    "rspStatusType": "3",
                    "rspStatusThreshold": "0",
                    "description": "从SLS中查询日志"
                },
                "componentName": "SLS",
                "actionName": "run_query",
                "assetUuid": "54c20873-deb3-4474-bdc2-12aba357acb4",
                "cascaderValue": []
            },
            "isNode": true
        },
        {
            "position": {
                "x": -788,
                "y": 15
            },
            "size": {
                "width": 36,
                "height": 36
            },
            "attrs": {
                "body": {
                    "fill": "white",
                    "strokeOpacity": 0.95,
                    "stroke": "black",
                    "strokeWidth": 2
                },
                "label": {
                    "text": "",
                    "fontSize": 12,
                    "refX": 0.5,
                    "refY": "100%",
                    "refY2": 4,
                    "textAnchor": "middle",
                    "textVerticalAnchor": "top"
                }
            },
            "visible": true,
            "shape": "circle",
            "id": "StartEvent_1",
            "zIndex": 1,
            "data": {
                "nodeType": "startEvent",
                "appType": "basic",
                "valueData": {},
                "icon": "icon-circle"
            },
            "markup": [
                {
                    "tagName": "circle",
                    "selector": "body"
                },
                {
                    "tagName": "text",
                    "selector": "label"
                }
            ],
            "isNode": true
        },
        {
            "position": {
                "x": -21,
                "y": 25
            },
            "size": {
                "width": 36,
                "height": 36
            },
            "attrs": {
                "body": {
                    "fill": "white",
                    "strokeOpacity": 0.95,
                    "stroke": "black",
                    "strokeWidth": 2
                },
                "path": {
                    "r": 12,
                    "refX": "50%",
                    "refY": "50%",
                    "fill": "black",
                    "strokeOpacity": 0.95,
                    "stroke": "black",
                    "strokeWidth": 4
                },
                "label": {
                    "text": "",
                    "fontSize": 12,
                    "refX": 0.5,
                    "refY": "100%",
                    "refY2": 4,
                    "textAnchor": "middle",
                    "textVerticalAnchor": "top"
                }
            },
            "visible": true,
            "shape": "circle",
            "id": "EndEvent_1bi7n65",
            "zIndex": 1,
            "data": {
                "nodeType": "endEvent",
                "appType": "basic",
                "valueData": {},
                "icon": "icon-radio-off-full"
            },
            "markup": [
                {
                    "tagName": "circle",
                    "selector": "body"
                },
                {
                    "tagName": "circle",
                    "selector": "path"
                },
                {
                    "tagName": "text",
                    "selector": "label"
                }
            ],
            "isNode": true
        },
        {
            "shape": "custom-edge",
            "zIndex": 1,
            "id": "SequenceFlow_0d1fm8e",
            "data": {
                "nodeType": "sequenceFlow",
                "appType": "basic",
                "icon": "icon-upper-right-arrow",
                "isRequired": false
            },
            "labels": [],
            "isNode": false,
            "source": {
                "cell": "StartEvent_1"
            },
            "target": {
                "cell": "Action_15qsqhz"
            },
            "vertices": [],
            "visible": true,
            "router": {
                "name": "manhattan",
                "args": {
                    "padding": 5,
                    "excludeHiddenNodes": true,
                    "excludeNodes": [
                        "clone_node_id"
                    ]
                }
            }
        },
        {
            "position": {
                "x": -304,
                "y": 0
            },
            "size": {
                "width": 137,
                "height": 66
            },
            "view": "react-shape-view",
            "shape": "activity",
            "id": "32124b94-ecd0-4370-9878-c08676bacde4",
            "zIndex": 1,
            "data": {
                "nodeType": "action",
                "appType": "component",
                "nodeName": "SLS_2",
                "valueData": {
                    "logItems": "{\"test\":\"test\"}",
                    "project": "test_project",
                    "logstore": "test_logstore",
                    "endpoint": "cn-shangzhou.log.aliyuncs.com",
                    "topic": "test"
                },
                "icon": "https://sophon-gen-v2.oss-cn-zhangjiakou.aliyuncs.com/componentUpload/1641804391435_SLS_logo.svg?Expires=1745566401&OSSAccessKeyId=STS.NVuDNZvKqtwuTJkfJtY******&Signature=s3Rr36HjjDz%2Bqu5wx%2FaTAtTR0dc%3D&security-token=CAIS2AJ1q6Ft5B2yfSjIr5XAD%2FTum5RQw7WeVmzagkohVbkU2PzZrDz2IHhMenFpAegcv%2Fw%2BlGFZ6%2F8elrp6SJtIXleCZtF94oxN9h2gb4fb40wIXRWK0s%2FLI3OaLjKm9u2wCryLYbGwU%2FOpbE%2B%2B5U0X6LDmdDKkckW4OJmS8%2FBOZcgWWQ%2FKBlgvRq0hRG1YpdQdKGHaONu0LxfumRCwNkdzvRdmgm4NgsbWgO%2Fks0OP3AOrlrBN%2Bdiuf8T9NvMBZskvD42Hu8VtbbfE3SJq7BxHybx7lqQs%2B02c5onDWwAJu0%2FXa7uEo4wydVNjFbM9A65Dqufxn%2Fpgt%2Braj4X7xhhEIOVJSSPbSZBbSxJNvU1RXDxQVcEYWxylurjnXvF%2Bo5q63vwUGin%2B2svzhw6RGJ1dq8DgINtD0jokjPndRVbLXs84nxS7gbsGn76oY2zradH%2FdU4il8CyMytAXxqAAZDNL%2FMfqwnfpUW9RMOXa9Q0%2FU5jug3GzZT64g7TdTWpUYEW9f10E3bF%2BHv5B%2Bd9c5yYLrOjVRiwJ7hkN8GRS67b55hST1lWccu6vd%2FKBk9qxZbSc02pD7ymERlhj7sts0FXMLuYlYqc%2BSSGF8vK0GW%2F%2FST%2FLdOTF2wDJB4C9oTCIAA%3D",
                "description": "向SLS中写入数据",
                "advance": {
                    "inputParamMode": false,
                    "onError": "stop_cur_flow",
                    "rspStatusType": 3,
                    "rspStatusThreshold": 0
                },
                "componentName": "SLS",
                "actionName": "putLogs",
                "assetUuid": "54c20873-deb3-4474-bdc2-12aba357acb4",
                "cascaderValue": [
                    {
                        "label": "SLS_1",
                        "value": "${SLS_1}",
                        "children": []
                    }
                ]
            },
            "isNode": true
        },
        {
            "shape": "custom-edge",
            "zIndex": 1,
            "id": "0823a20d-6441-4cef-83e0-0d04dc14fc3b",
            "data": {
                "nodeType": "sequenceFlow",
                "appType": "basic",
                "icon": "icon-upper-right-arrow",
                "isRequired": false
            },
            "labels": [],
            "isNode": false,
            "source": {
                "cell": "32124b94-ecd0-4370-9878-c08676bacde4"
            },
            "target": {
                "cell": "EndEvent_1bi7n65"
            },
            "vertices": []
        }
    ]
}

资源实例配置

使用SLS日志组件，需要先配置日志服务的相关信息。操作步骤如下：

  1. 单击组件，在基础信息配置页签，资源实例配置区域点击资源实例配置。

  2. 在资源实例配置页面，单击新增按钮。参照如下完成配置：

    配置项

    说明

    assetname

    可根据自身业务自定义资源名称。

    end_point

    SLS服务的接入地址，接入地址可参见服务接入点。

    sub_id

    可操作日志服务用户的AccessKey ID，如何创建AccessKey信息请参考创建AccessKey。

    access_key

    可操作日志服务用户的AccessKey Secret。

    重要

    若使用RAM子账号的AK信息，需要确保子账号有操作日志服务API的权限。

run_query

参数

参数

描述

project

要访问的SLS Project名称。

logstore

要访问的SLS logStore名称。

endpoint

SLS服务的接入地址，接入地址可参见服务接入点。

query

查询SLS的SQL语法。

重要

如果使用的是分析语句且配置的limit超过100，必须配置order by字段，否则会导致部分数据查询不到。

from

查询的开始时间，单位毫秒。

to

查询的截止时间，单位毫秒。

limit

最大条目数，上限1万。

putLogs动作

参数

参数

描述

project

要访问的SLS Project名称。

logstore

要访问的SLS logStore名称。

endpoint

SLS服务的接入地址。

topic

用户自定义字段，用以标记一批日志。

logItems

要写入的日志信息。写入的日志格式仅支持JSON格式的string 、JSONObject 3、JSONArray，例如{"test":"test"}。

说明

写入时会对每一行日志都加一个_logUuid字段唯一标识写入的日志，便于用户查询刚写入的日志。

上一篇：CloudSIEM组件下一篇：AliyunCloudOpenAPI组件