The page has been translated by Gen AI.

Security Group Logging

To store Security Group logs, first create a bucket in Object Storage for the logs, and then set that bucket as the log repository in Security Group Logging. Next, on the Security Group Details page, when you enable log storage, the Security Group logs are saved to an Object Storage bucket.

To store Security Group logs, follow the steps below.

  1. To store Security Group logs, you can create a bucket in Object Storage or use an existing bucket. 1. To create a bucket, please refer to Object Storage 생성하기.
  2. To set the bucket for the log storage of Security Group Logging, refer to Security Group Logging 로그 저장소 사용 설정하기.
  3. In the Security Group detail view, to set the log storage option to Enabled, refer to Security Group 로그 저장 사용하기.

Security Group Logging Configure log storage usage

To set the log storage option of a Security Group to Enabled, you must first configure a log repository in Security Group Logging.

Reference
To configure a log repository for Security Group Logging, an Object Storage bucket for log storage is required. First, create a bucket in the Object Storage service. For more details, refer to Object Storage 생성하기.

To enable the log repository for Security Group Logging, follow the steps below.

  1. Click the All Services > Management > Network Logging > Security Group Logging menu. 1. Go to the Security Group Logging List page.
  2. Security Group Logging List Click the drop-down list located at the top of the page and select Log storage bucket. 2. When you select a bucket, log storage path is displayed.
  3. After verifying the log storage bucket and log storage path, click the Apply button.
information
Security Group Logging after setting the log repository, on the Security Group Details page you must set the log storage option to Enabled for logging to start. For more details, see Security Group 로그 저장 사용하기.

Retrieve Security Group Logging List

If you configure the log storage bucket for Security Group Logging, you can view the Security Group Logging list.

To view the Security Group Logging list, follow these steps.

  1. All Services > Management > Network Logging > Security Group Logging Click the menu. 1. Go to the Security Group Logging List page.
  2. Security Group Logging List On the page, check the resources in use and the log storage targets.
    CategoryDetailed description
    Resource IDSecurity Group ID
    Save targetSecurity Group name
    Save registration date and timeSecurity Group log storage registration timestamp
    Table. Security Group Logging list items
    Reference
    After setting the log repository for Security Group Logging, you must set the log storage option to Enabled in the Security Group detail view for logging to start. For more details, see Security Group 로그 저장 사용하기.

Check detailed information of Security Group Logging

Stored logs contain different detailed information for each protocol. Please refer to the content below for details.

TCP / UDP

Stored log example: 2024-10-11T02:18:39,drop,to-lport: tcp,198.19.65.2,6443,192.168.22.131,20427

CategoryExplanation
2024-10-11T02:18:39Log date and time (2024-10-11, 02:18:39)
dropAction (drop / allow)
to-lportDirection
  • to-lport: inbound
  • from-lport: outbound
tcpProtocol (tcp / udp / icmp / ip)
192.168.65.2Source IP
6443Departure Port
192.168.22.131Destination IP
20427Destination Port
Table. TCP / UDP log detailed information items

ICMP

Stored log example: 2024-10-11T02:18:39,allow,to-lport: icmp,192.168.65.2,192.168.22.131,8

CategoryExplanation
2024-10-11T02:18:39Log date and time (2024-10-11, 02:18:39)
to-lportDirection
  • to-lport: inbound
  • from-lport: outbound
allowAction (drop / allow)
tcpProtocol (tcp / udp / icmp / ip)
192.168.65.2Source IP
192.168.22.131Destination IP
8ICMP type ID
Table. ICMP log detailed information items

IP

Stored log example: 2024-10-11T02:18:39,deny,ip,192.168.65.2,192.168.22.131,103

CategoryExplanation
2024-10-11T02:18:39Log date and time (2024-10-11, 02:18:39)
denyAction (drop / allow)
ipProtocol
192.168.65.2Source IP
192.168.22.131Destination IP
103IP Protocol ID
  • 1: ICMP
  • 6: TCP
  • 17: UDP
Table. IP Log Detailed Information Items

Security Group Logging Configure to Not Use Log Storage

In Security Group Logging, you can set the log storage to not be used.

To disable the log repository for Security Group Logging, follow these steps.

  1. Click the All Services > Management > Network Logging > Security Group Logging menu. 1. Security Group Logging List Navigate to the page.
  2. On the Security Group Logging List page, click the Log Storage Settings icon at the top. 2. Log repository settings Navigate to the popup window.
  3. Log storage settings in the popup window, select log storage bucket as Not used, and click the Confirm button.
Reference
  • The log storage settings can be changed when there is no log destination.
  • To change the log storage bucket, first change the setting to unused. * You can then reset the settings to make changes.
How-to guides
Address Group