Monitoring vStorage Through Logs

What is logs?

A log is a collection of events that are collected at different points in time. These events are typically generated by applications or services and contain full context information at the time the event occurred.


Why are logs useful?

Logs are an important element of cybersecurity. When done properly, logging can provide us with a clear view of what is happening or has happened in our system, allowing us to verify events with greater accuracy and make adjustments as needed.


Monitoring vStorage through vStorage logs on the vMonitor Platform

Monitoring vStorage through logs is easy when you use the vMonitor Platform. We have transferred logs from vStorage to vMonitor Platform regularly every 5 minutes. Rest assured that vMonitor Platform is also a product of the VNG Cloud ecosystem. You can use vMonitor Platform to configure monitoring features based on vStorage logs. Of course, to be able to monitor, you need to purchase a log quota package for the vMonitor Platform service. For details, please refer to vMonitor Platform.

The log content pushed to the system includes the following information:

FieldsMeaning

Fields

Meaning

@timestamp

Thแปi gian sแปฑ kiแป‡n bแบฏt ฤ‘แบงu tฦฐฦกng tแปฑ nแป™i dung field "request_start_time"

account

Account ID cแปงa tร i khoแบฃn vStorage, cรณ ฤ‘แป‹nh dแบกng AUTH_<ID>

bytes_per_second

Vแบญn tแป‘c tแบฃi lรชn hoแบทc tแบฃi xuแป‘ng tรนy ngแปฏ cแบฃnh cแปงa request, sแป‘ ฤ‘ฦฐแปฃc tรญnh toรกn dแปฑa trรชn dแปฏ liแป‡u mรกy chแปง gแปญi, nhแบญn vร  thแปi gian ฤ‘แปƒ hoร n thร nh

bytes_recvd

Tแป•ng sแป‘ bytes dแปฏ liแป‡u mรกy chแปง nhแบญn ฤ‘ฦฐแปฃc , tฦฐฦกng ฤ‘ฦฐฦกng vแป›i chiแปu ngฦฐแปi dรนng tแบฃi lรชn dแปฏ liแป‡u

bytes_sent

Tแป•ng sแป‘ bytes dแปฏ liแป‡u mรกy chแปง ฤ‘รฃ gแปญi tแป›i ngฦฐฦกi dรนng, tฦฐฦกng ฤ‘ฦฐฦกng vแป›i chiแปu ngฦฐแปi dรนng tแบฃi xuแป‘ng dแปฏ liแป‡u

bytes_sum

Tแป•ng sแป‘ bytes cแบฃ hai chiแปu tแบฃi lรชn vร  tแบฃi xuแป‘ng

client_country

Quแป‘c gia cแปงa ฤ‘แป‹a chแป‰ IP ฤ‘รฃ tฦฐฦกng tรกc

client_ip

ฤแป‹a chแป‰ IP cแปงa thiแบฟt bแป‹ ฤ‘รฃ tฦฐฦกng tรกc

cls_service

ฤแบกi diแป‡n dแป‹ch vแปฅ ฤ‘รฃ sinh ra dรฒng Log. Vรญ dแปฅ: vStorage

container

Tรชn cแปงa container

host

VNGCLOUD

lag_seconds

object

Tรชn cแปงa object

policy_index

ID cแปงa gรณi lฦฐu trแปฏ: Gold/Silver/Archive theo thแปฉ tแปฑ lร  0,1,2

project_id

ID cแปงa project

received_at

Thแปi gian nhแบญn request

referer

Thรดng tin ฤ‘แป‹a chแป‰ website ฤ‘รฃ yรชu cแบงu object trแปฑc tiแบฟp tแปซ browser ngฦฐแปi dรนng trong trฦฐแปng hแปฃp container ฤ‘ฦฐแปฃc public hoแบทc qua vCDN

region

Khu vแปฑc lฦฐu trแปฏ trรชn vStorage. Vรญ dแปฅ: HCM01, HAN01

request_end_time

Thแปi gian request hoร n tแบฅt trรชn mรกy chแปง lฦฐu trแปฏ

request_method

Method cแปงa request thฦฐแปng lร  GET/PUT/POST/DELETE/HEAD

request_path

ฤฦฐแปng dแบซn ฤ‘แบงy ฤ‘แปง cแปงa request

request_start_time

Thแปi gian bแบฏt ฤ‘แบงu nhแบญn request tแปซ ngฦฐแปi dรนng

request_time

Tแป•ng thแปi gian hoร n tแบฅt yรชu cแบงu theo ฤ‘ฦกn vแป‹ giรขy (seconds)

source

Nguแป“n xuแบฅt phรกt Request. Vรญ dแปฅ: "S3" tแปฉc request khรกch hร ng ฤ‘ang dรนng S3 kแบฟt nแป‘i, "-" request ฤ‘ang dรนng Swift, "SLO" request ฤ‘ang dรนng Large Object vร  ฤ‘ang thแปฑc hiแป‡n segments/Multipart

status_int

Mรฃ phแบฃn hแป“i tแปซ mรกy chแปง thแปƒ hiแป‡n thร nh cรดng hoแบทc thแบฅt bแบกi. Vรญ dแปฅ: 200, 201, 401, 404...

storage_class

Storage class mร  Container ฤ‘รฃ ฤ‘ฤƒng kรฝ (Gold/Silver/Archive)

transaction_id

ID cแปงa Request ฤ‘รฃ thแปฑc hiแป‡n dรนng truy vแบฟt hoแบทc so sรกnh mแป™t Request cแปฅ thแปƒ giแปฏa mรกy chแปง vร  khรกch hร ng

user_agent

Thรดng tin User-Agent trong Request HTTP, thแปƒ hiแป‡n phiรชn bแบฃn Client/Browser/Application ฤ‘ang thแปฑc hiแป‡n kแบฟt nแป‘i ฤ‘แบฟn mรกy chแปง ฤ‘แปƒ thแปฑc thi Request

Last updated