tencent cloud

NAT Gateway provides the flow log collection feature to collect and analyze NAT Gateway traffic and generate logs and analysis charts. This helps you stay informed of cross-region communication and quickly locate and solve problems based on the logs, thus improving the business availability and Ops efficiency.

Note：

• The flow log feature is in beta test. To try it out, submit a ticket for application.
• The Flow Log service is free of charge, but the data stored in CLS will be charged at the standard prices of CLS.
• The flow log data is stored in CLS. Make sure that you have granted the Flow Log service permissions to access CLS before querying log data in CLS.

Directions

1. Log in to the VPC console and select Flow Logs > Log List in the left sidebar.
2. Select the region in the top-left corner of the Flow Logs page and click +Create.
3. Configure the following parameters in the Create flow log window.
   

   Field	Description
   Name	The name of the flow log.
   Collection range	Select “NAT Gateway”.
   NAT gateway	The information about the NAT gateway.
   Collection type	Specify the type of traffic to be collected by the flow log: All traffic, or the traffic rejected or accepted by security groups or ACL.
   Logset	Specify the storage location in CLS for flow logs. If you already have a logset, select it directly; otherwise, keep Created by system selected, so that the system will create one for you. You can also click Create to create one in the CLS console.
   Log topic	Specify the minimum dimension of log storage, which is used to distinguish between different types of logs, such as `Accept` log. If you already have a log topic, select it directly; otherwise, keep **Created by system** selected, so that the system will create one for you. You can also go to the CLS console to create one. Note For more information on how to configure a logset, log topic, and index, see Creating Logsets and Log Topics.
   Tag key	Click Advanced options to enter or select a tag key for the identification and management of the flow log.
   Tag value	Click Advanced options to enter or select a tag value. It can also be left empty.

4. Click OK.

   Note

   You can view the record of a newly created flow log in CLS after six minutes upon the creation (one minute for the capture window and five minutes for data publishing).

5. After about six minutes, click Storage location or View to enter the Search and analysis page of the CLS service, select the region and time period for which to view logs, and click Search and analyze to view the logs.
   
   Below are sample logs:
   

   Note：

   For fields description, see Flow Log Record. For log analysis, see Quick Analysis.