The page has been translated by Gen AI.

NAT Logging

To store NAT logs, first create a bucket in Object Storage for the logs, and then configure that bucket in the NAT Logging log repository. Then, when you enable log storage in the NAT detail view, NAT logs will start being saved to the Object Storage bucket.

To store NAT logs, you need to configure in the following order.

  1. To store NAT logs, you can create a bucket in Object Storage or use an existing bucket. 1. To create a bucket, please refer to Create Object Storage.
  2. To set the bucket for the NAT Logging log repository, please refer to Using NAT Logging Log Repository.
  3. To set the log storage option to Enabled in the NAT detail view, refer to Using NAT Log Storage.

Using NAT Logging Log Repository

To set NAT log storage to enabled, you must first configure the log repository in NAT Logging.

Reference
To set up a NAT Logging log repository, you need an Object Storage bucket for log storage. First, please create a bucket in the Object Storage service. For more details, see Create Object Storage.
  1. Click the All Services > Management > Network Logging > NAT Logging menu. 1. Navigate to the NAT Logging List page.
  2. Click the Log Repository Settings button at the top of the NAT Logging List page. 2. Log Repository Settings Navigate to the popup window.
  3. Log storage configuration In the popup window, select the log storage bucket. 3. When you select a bucket, the log storage path is displayed.
  4. Log storage settings In the popup window, verify the log storage bucket and log storage path, then click the Confirm button.
  5. Notification After checking the popup window’s message, click the Confirm button.
information
After configuring the NAT Logging log repository, you must set the log storage option to Enabled in the NAT detail view for logging to begin. For more details, refer to Using NAT Log Storage.

NAT Logging List

When you configure the NAT Logging log storage bucket, the NAT Logging list is displayed.

  • All Services > Management > Network Logging > NAT Logging Click the menu. * Go to the NAT Logging List page.
    Category
    Required
    Detailed description
    Resource IDrequiredNAT resource ID
    Save targetRequiredNAT resource name
    Registration Date and TimeRequiredNAT log repository registration date and time
    Table. NAT Logging list items
Reference
After configuring the NAT Logging log repository, you must set the log storage option to Enabled in the NAT detail view for logging to begin. For detailed information, refer to Using NAT Log Storage.

Check NAT Logging contents

Refer to the following information to review the saved log entries.

Stored log example: 2024-10-11T11:19:03,accept,259,17,192.168.2.173,46937,192.168.0.53,53,100.100.14.52,26937

CategoryExplanation
2024-10-11T11:19:03Log date and time (2024-10-11, 11:19:03)
acceptAction (deny / accept)
259Firewall Rule ID (Policy ID) that generated the log
17IP Protocol ID
  • 1: ICMP
  • 6: TCP
  • 17: UDP
192.168.2.173Source IP
46937Departure Port
192.168.0.53Destination IP
53Destination Port
100.100.14.52NAT-translated IP
26937NAT-translated Port

NAT Logging Log Storage Not Used {#use-1}

In NAT Logging, you can configure the log repository as unused.

Click the All Services > Management > Network Logging > NAT Logging menu. Navigate to the NAT Logging List page. On the NAT Logging List page, click the Log Storage Settings button at the top. You will be taken to the Log Storage Settings popup. Log storage settings in the popup, select Log storage bucket as Not used, and click the Confirm button.

Reference
Log storage settings can be changed when there is no log storage target. You can change the log storage bucket by selecting it as unused, confirming, and then reconfiguring it.
PrivateLink Endpoint
Release Note