Security Group Logging
To store Security Group logs, first create a bucket in Object Storage for the logs, and then set that bucket as the log repository in Security Group Logging. Next, on the Security Group Details page, when you enable log storage, the Security Group logs are saved to an Object Storage bucket.
To store Security Group logs, follow the steps below.
- To store Security Group logs, you can create a bucket in Object Storage or use an existing bucket. 1. To create a bucket, please refer to Object Storage 생성하기.
- To set the bucket for the log storage of Security Group Logging, refer to Security Group Logging 로그 저장소 사용 설정하기.
- In the Security Group detail view, to set the log storage option to Enabled, refer to Security Group 로그 저장 사용하기.
Security Group Logging Configure log storage usage
To set the log storage option of a Security Group to Enabled, you must first configure a log repository in Security Group Logging.
To enable the log repository for Security Group Logging, follow the steps below.
- Click the All Services > Management > Network Logging > Security Group Logging menu. 1. Go to the Security Group Logging List page.
- Security Group Logging List Click the drop-down list located at the top of the page and select Log storage bucket. 2. When you select a bucket, log storage path is displayed.
- After verifying the log storage bucket and log storage path, click the Apply button.
Retrieve Security Group Logging List
If you configure the log storage bucket for Security Group Logging, you can view the Security Group Logging list.
To view the Security Group Logging list, follow these steps.
- All Services > Management > Network Logging > Security Group Logging Click the menu. 1. Go to the Security Group Logging List page.
- Security Group Logging List On the page, check the resources in use and the log storage targets.
Category Detailed description Resource ID Security Group ID Save target Security Group name Save registration date and time Security Group log storage registration timestamp Table. Security Group Logging list itemsReferenceAfter setting the log repository for Security Group Logging, you must set the log storage option to Enabled in the Security Group detail view for logging to start. For more details, see Security Group 로그 저장 사용하기.
Check detailed information of Security Group Logging
Stored logs contain different detailed information for each protocol. Please refer to the content below for details.
TCP / UDP
Stored log example: 2024-10-11T02:18:39,drop,to-lport: tcp,198.19.65.2,6443,192.168.22.131,20427
| Category | Explanation |
|---|---|
| 2024-10-11T02:18:39 | Log date and time (2024-10-11, 02:18:39) |
| drop | Action (drop / allow) |
| to-lport | Direction
|
| tcp | Protocol (tcp / udp / icmp / ip) |
| 192.168.65.2 | Source IP |
| 6443 | Departure Port |
| 192.168.22.131 | Destination IP |
| 20427 | Destination Port |
ICMP
Stored log example: 2024-10-11T02:18:39,allow,to-lport: icmp,192.168.65.2,192.168.22.131,8
| Category | Explanation |
|---|---|
| 2024-10-11T02:18:39 | Log date and time (2024-10-11, 02:18:39) |
| to-lport | Direction
|
| allow | Action (drop / allow) |
| tcp | Protocol (tcp / udp / icmp / ip) |
| 192.168.65.2 | Source IP |
| 192.168.22.131 | Destination IP |
| 8 | ICMP type ID |
IP
Stored log example: 2024-10-11T02:18:39,deny,ip,192.168.65.2,192.168.22.131,103
| Category | Explanation |
|---|---|
| 2024-10-11T02:18:39 | Log date and time (2024-10-11, 02:18:39) |
| deny | Action (drop / allow) |
| ip | Protocol |
| 192.168.65.2 | Source IP |
| 192.168.22.131 | Destination IP |
| 103 | IP Protocol ID
|
Security Group Logging Configure to Not Use Log Storage
In Security Group Logging, you can set the log storage to not be used.
To disable the log repository for Security Group Logging, follow these steps.
- Click the All Services > Management > Network Logging > Security Group Logging menu. 1. Security Group Logging List Navigate to the page.
- On the Security Group Logging List page, click the Log Storage Settings icon at the top. 2. Log repository settings Navigate to the popup window.
- Log storage settings in the popup window, select log storage bucket as Not used, and click the Confirm button.
- The log storage settings can be changed when there is no log destination.
- To change the log storage bucket, first change the setting to unused. * You can then reset the settings to make changes.