Log Transmission

• 1: Overview
• 2: How-to guides
• 3: Release Note

1 - Overview

Service Overview

Log Transmission is a service that collects and stores logs in real time from firewalls, IPS, and DDoS security devices, and transmits them to the areas required by the customer. It provides a foundation for performing security monitoring in the user domain using those logs.

Features

• Security Event Log Collection/Transmission: Collect and store logs in real time from security devices, and transmit security events.
• Secure Log Storage/Transmission: Log data can be stored securely, and backup and recovery are possible when needed. Collected logs are safely kept in a redundant storage, and data is transmitted by utilizing VPN services, etc. Sending securely.

Configuration diagram

Provided features

We provide the following features.

• Integration of various security log sources
  • Real-time log collection from various sources such as firewalls, IPS, and DDoS security devices.
• Log Filtering and Processing
  • Filter out unnecessary logs or extract only the logs requested by the customer.

Component

Log Transmission sends service log sources from the Samsung Cloud Platform to the equipment or system desired by the customer.

• The service runs by connecting via VPN to the customer’s office (server room) where the device that receives the log source is located.

Constraints

To use Log Transmission, please check the following items in advance.

• We collect and transmit logs for Security products offered by the Samsung Cloud Platform.
• To send logs, you must be connected via VPN to the device that receives the logs.

Provision status by region

Log Transmission is available in the environments below.

Preceding Service

This is a list of services that must be pre-configured before creating the Log Transmission service. Refer to the guide provided for each service for details and prepare in advance.

• When running Log Transmission, you must select the service to which logs will be sent. Once the log transmission service target is determined, a VPN connection is required for secure log transmission.
• To use the Log Transmission service, configuration work is required for communication between the customer’s Office (on‑premise) and the customer’s VPC within the Samsung Cloud Platform. Please follow the process below to request an uplink line, including external integration software and VPN settings, Direct Connect firewall opening, etc.

1. Create a Direct Connect service.
2. Create a connection between the customer’s VPC and DCon-VPN.
3. Apply for an uplink line for communication between the client’s On-premise and VPC.
   • Application path: Support Center > Service Request List > Service Request
   • Select service: Networking > Direct Connect
   • Task Category: Uplink line request
4. Configure routing for the VPN path.
   • Set up the required routing information such as Firewall, Security Group, Direct Connect, etc.

2 - How-to guides

Users can create the service by entering the required information for using the Log Transmission service through the Samsung Cloud Platform Console.

Create Log Transmission

You can apply for and use the Log Transmission service from the Samsung Cloud Platform Console.

To request the creation of a Log Transmission service, follow these steps.

1. Click the All Services > Security > Log Transmission menu. Navigate to the Service Home page of Log Transmission.

2. On the Service Home page, click the Log Transmission Service Request button. You will be taken to the Support Center > Service Request List > Service Request page.

3. Service Request page, enter or select the required information in the mandatory input fields.

   • In the task type, select Log Transmission creation.

     Input field	Detailed description
     Title	Enter the title of the service request content Example: Log Transmission Service Creation Request
     Region	Select the location of the Samsung Cloud Platform Automatically filled with the region corresponding to the Account
     Service	Select the service category and service. If you click the Log Transmission service request button, it is entered automatically Service Category: Security Service: Log Transmission
     Task classification	Select the type you want to request Create Log Transmission: select when requesting a new service
     content	Customer Basic Information Entry and Application Process Guide Content: End Customer/MSP Information
     Attachment	Upload the completed Log Transmission service application (required) and any additional files you wish to share You can attach up to 5 files, each no larger than 5 MB Only doc, docx, xls, xlsx, ppt, ppts, hwp, txt, pdf, jpg, jpeg, png, gif, tif files are allowed

     Table. Log Transmission Service Creation Request Items

4. After reviewing the application process and reference information, click the Form Download > Service Request Form Download button to download the Log Transmission Service Application Form.

5. Please fill out the Log Transmission Service Application Form.

   • Refer to the item descriptions in the Application Information and Monitoring Information tabs and complete the required fields.

     Category	Detailed description
     Application Information	Fill in required items such as application type, usage period, recipient information, etc. Application type: select application Usage period: enter desired start date Basic information: enter Account name, Project name, recipient information
     Monitoring information	Enter required items such as log transmission target and customer IP (range) Complete all items except special cases

     Table. Main contents of Log Transmission service creation request form

6. Attach the completed application form in the attachment area.

7. On the service request page, click the Request button.

   • After the request is completed, check the submitted details on the Support Center > Service Request List page.

8. After the monitoring personnel review the submitted service request, they proceed with the process to use the service.

9. The Log Transmission service is now available.

Log Transmission Check detailed information

The Log Transmission service proceeds with the process for the service after applying through an SR. Unlike other services, detailed Log Transmission information cannot be viewed in the Console.

• To view detailed information, click the Contact Us button on the Support Center > Inquiry List page. On the Contact Us page, you can write your question and submit it.

Terminate Log Transmission

To request cancellation of the Log Transmission service, follow the steps below.

1. Click the All Services > Management > Support Center menu. You will be taken to the Support Center > Service Home page.
2. On the Support Center Service Home page, click the Service Request button. You will be taken to the Service Request List page.
3. On the Service Request List page, click the Service Request button. You will be taken to the Service Request page.
4. Service Request page: enter or select the required information in the mandatory input fields.
   • In the task category, select Log Transmission Cancellation.

     Input field	Detailed description
     Title	Enter the title of the service request Example: Log Transmission Service Termination Request
     Region	Select the location of the Samsung Cloud Platform Automatically entered with the region corresponding to the Account
     Service	Select service category and service Service Category: Security Service: Log Transmission
     Task classification	Select the type you want to request Log Transmission termination: select if you are terminating the service
     content	Customer Basic Information Entry and Application Process Guide Content: End Customer/MSP Information
     Attachment	Upload the completed Log Transmission service application (required) and, if you have additional files you want to share, proceed with the upload You can attach up to 5 files, each no larger than 5 MB Only doc, docx, xls, xlsx, ppt, ppts, hwp, txt, pdf, jpg, jpeg, png, gif, and tif files are allowed

     Table. Table. Log Transmission Service Termination Request Items
5. After reviewing Application Process and Reference Information, click the Form Download > Service Request Form Download button to download the Log Transmission Service Application Form.
6. Log Transmission Service Application Form please fill out.
   • Refer to the item descriptions in the Application Information and Monitoring Information tabs and complete the required fields.

     Category	Detailed description
     Application Information	Fill in required fields such as request type, usage period, recipient information, etc. Request type: select request Usage period: enter desired service termination date Basic information: enter Account name, Project name, recipient information Usage amount does not need to be filled out
     Monitoring information	Fill in required items such as log transmission target and customer IP (range) Fill out all items except special cases

     Table. Log Transmission Service Termination Application Form Main Contents
7. Attach the completed application form to the attachment area.
8. Click the Request button on the service request page.
   • After the request is completed, verify the submitted information on the Support Center > Service Request list page.
9. After the monitoring staff verifies the submitted service request, the termination process is completed once the log transmission target and the customer’s used IP (range) are removed.
   • Service termination takes 2–3 business days, counting from the cancellation request date.

3 - Release Note

Log Transmission