Bind SLS Logstore Index¶
Select SLS Logstore. Guance supports two authorization methods: RAM-account Authorization and Cross-account Authorization:
RAM-account Authorization¶
Account Authorization:
- Obtain the SLS Authorization File.
- Fill in AccessKey ID / AccessKey Secret (referred to as AK/AKS).
Resource Authorization:
- Select the region.
- Based on the AK/AKS filled in above, Guance automatically obtains the Project and Logstore.
- Guance Index: Defaults to the name of the Logstore, but you can also customize the name.
- Note: This index name is unrelated to SLS and is used for your subsequent data filtering in Guance.
- Access Type: To avoid configuration path errors that may result in data retrieval issues, choose either Internal Network Access or Public Network Access based on your actual situation.
Click Confirm to complete the index binding, and you can view it by switching indexes in the Explorer.
For Commercial and Dedicated Editions
- If you are a Guance Commercial Edition user, you can refer to the documentation RAM Account Authorization to obtain AK/AKS for index binding;
- If you are a Guance Exclusive Plan user, you can directly use the AK/AKS provided when you activated the Exclusive Plan for index binding. For information on how to activate the Exclusive Plan, refer to Activating Guance Exclusive Plan on Alibaba Cloud Marketplace;
- If you are a Guance Exclusive Plan user and wish to bind SLS log indexes from other Alibaba Cloud accounts, refer to RAM Account Authorization to obtain AK/AKS for index binding.
Cross-account Authorization¶
Note: This feature is not supported for Hong Kong(China), and overseas sites.
Account Authorization:
Click Go Now to be redirected to Alibaba Cloud for authorization after logging in.
Click Agree to Authorization, and a Service Provider UID Verification window will pop up. You can view the UID retrieval by clicking on the Service Provider Permissions Explanation Page. After entering the UID, click Confirm, and you will be automatically redirected to Alibaba Cloud Marketplace > Services Purchased, at which point the authorization is complete.
Resource Authorization:
-
After authorization, fill in your Alibaba Cloud account ID. After completion, Guance will automatically obtain the Project and Logstore.
-
Guance Index: Defaults to the name of the Logstore, but you can also customize the name.
- Note: This index name is unrelated to SLS and is used for your subsequent data filtering in Guance.
-
Access Type: To avoid configuration path errors that may result in data retrieval issues, choose either Internal Network Access or Public Network Access based on your actual situation.
Click Confirm to complete the index binding, and you can view it by switching indexes in the Explorer.
Note
-
To perform cross-account role authorization, you must use an Alibaba Cloud main account or a sub-account authorized with RAM Access Control GetRole, GetPolicy, CreatePolicy, CreatePolicyVersion, CreateRole, UpdateRole, AttachPolicyToRole permissions.
-
During the verification process, if the verified account is a sub-account with authorization, it will automatically locate the main account to which the sub-account belongs and retrieve the Projects and Logstores under the main account.
FAQ¶
How to confirm successful authorization in the Alibaba Cloud Marketplace?
You can go to the RAM Console from the authorization request page;
You can view the authorized roles in Roles and the authorized entities and permission strategies in Grants.
Why can't I automatically obtain Projects and Logstores after entering the Alibaba Cloud account ID?
Only if your Alibaba Cloud account has activated the SLS Log Service and completed the authorization, will it automatically obtain Projects and Logstores.
Note: Projects prefixed with /guance-wksp- will be automatically filtered out and not listed; if your Project does not have any associated Logstores, they will not be automatically obtained.