The page has been translated by Gen AI.

Security Group Logging

To store Security Group logs, you must first create a bucket in Object Storage to store the logs and then set the bucket as the log storage for Security Group Logging. After that, you can enable log storage in the Security Group details, and Security Group logs will start being stored in the Object Storage bucket.

To store Security Group logs, you need to follow these steps:

  1. You can create a new bucket in Object Storage for storing Security Group logs or use an existing bucket. To create a bucket, refer to Creating Object Storage.
  2. To set the bucket as the log storage for Security Group Logging, refer to Using Security Group Logging Log Storage.
  3. To enable log storage in the Security Group details, refer to Enabling Security Group Log Storage.

Using Security Group Logging Log Storage

To enable Security Group log storage, you must first set up the log storage in Security Group Logging.

Note
To set up Security Group Logging log storage, you need an Object Storage bucket for log storage. First, create a bucket in the Object Storage service. For more information, refer to Creating Object Storage.
  1. Click All Services > Management > Network Logging > Security Group Logging. You will be taken to the Security Group Logging List page.
  2. On the Security Group Logging List page, click the Log Storage Settings button at the top. You will be taken to the Log Storage Settings popup window.
  3. In the Log Storage Settings popup window, select the Log Storage Bucket. After selecting the bucket, the Log Storage Path will be displayed.
  4. In the Log Storage Settings popup window, confirm the Log Storage Bucket and Log Storage Path, and then click the Confirm button.
  5. Confirm the message in the Notification popup window and click the Confirm button.
Guide
After setting up Security Group Logging log storage, you must enable log storage in the Security Group details for log storage to start. For more information, refer to Enabling Security Group Log Storage.

Security Group Logging List

After setting up the Security Group Logging log storage bucket, you can view the Security Group Logging list.

  1. Click All Services > Management > Network Logging > Security Group Logging. You will be taken to the Security Group Logging List page.
    Category
    Required
    Description
    Resource IDRequiredSecurity Group ID
    Storage TargetRequiredSecurity Group Name
    Storage Registration DateRequiredSecurity Group Log Storage Registration Date
    Table. Security Group Logging List Items
Note
After setting up Security Group Logging log storage, you must enable log storage in the Security Group details for log storage to start. For more information, refer to Enabling Security Group Log Storage.

Checking Security Group Logging Content

Refer to the following content to check the stored log content.

  1. TCP / UDP

Example of stored log: 2024-10-11T02:18:39,drop,to-lport: tcp,198.19.65.2,6443,192.168.22.131,20427

CategoryDescription
2024-10-11T02:18:39Date and time when the log occurred (2024-10-11, 02:18:39)
dropAction (drop / allow)
to-lportDirection
  • to-lport: inbound
  • from-lport: outbound
tcpProtocol (tcp / udp / icmp / ip)
192.168.65.2Source IP
6443Source Port
192.168.22.131Destination IP
20427Destination Port
  1. ICMP

Example of stored log: 2024-10-11T02:18:39,allow,to-lport: icmp,192.168.65.2,192.168.22.131,8

CategoryDescription
2024-10-11T02:18:39Date and time when the log occurred (2024-10-11, 02:18:39)
to-lportDirection
  • to-lport: inbound
  • from-lport: outbound
allowAction (drop / allow)
icmpProtocol (tcp / udp / icmp / ip)
192.168.65.2Source IP
192.168.22.131Destination IP
8ICMP Type ID

Disabling Security Group Logging Log Storage

You can disable Security Group Logging log storage.

  1. Click All Services > Management > Network Logging > Security Group Logging. You will be taken to the Security Group Logging List page.
  2. On the Security Group Logging List page, click the Log Storage Settings button at the top. You will be taken to the Log Storage Settings popup window.
  3. In the Log Storage Settings popup window, select Do not use for the Log Storage Bucket, and then click the Confirm button.
Note
Log storage settings can be changed only when there is no log storage target. To change the log storage bucket, select Do not use, confirm, and then set it again.
How-to guides
Release Note