Documentation|Tencent Cloud

Recent Pages

JSON Shipping

Last updated: 2020-05-15 15:29:37

Overview

You can log in to the CLS Console and ship data in JSON format to Cloud Object Storage (COS). This document describes how to create a JSON shipping task.

Prerequisites

You have activated CLS, created a logset and a log topic, and successfully collected log data.
You have activated COS and created a bucket in the target region for log topic shipping. For more information, please see Creating Buckets.
Make sure that the current account has the permission to configure log shipping. If you have any questions about the shipping permission of sub-accounts/collaborators, please see Configuring Log Shipping by Sub-Account.

Directions

Log in to the CLS Console.
Click Logset on the left sidebar.
Click the name of the logset for which you want to create a shipping task.
In the row of the log topic to be shipped, select Manage > Shipping Configuration to enter the shipping configuration page.
Click Add Shipping Task to enter the Ship to COS page and complete basic configuration.

The configuration items are described as follows:

Configuration Item	Description	Rule	Required
Shipping Task Name	Sets the name of a shipping task.	The name can contain letters, numbers, underscores (_), and hyphens (-).	Yes
COS Bucket	Target bucket for shipping, which must be in the same region as the current log topic.	Select a value from the drop-down list.	Yes
Directory Prefix	Prefix of the COS bucket directory to which log files are shipped. You can define a directory prefix. By default, log files are directly stored in the bucket, and the file path is `{COS bucket}{directory prefix}{partition format}_{random}_{index}.{type}`, where `{random}_{index}` is a random number.	It cannot begin with `/`.	No
Partition Format	Directory automatically generated according to the creation time of the shipping task based on the strftime syntax. The slash (`/`) indicates a level-1 COS directory.	The value must be in the strftime format.	Yes
File Size	Maximum size of an uncompressed file to be shipped during a shipping interval. A log file larger than this size will be split into multiple files. The value can be from 100 MB to 10,000 MB.	The value must be a number ranging from 100 to 10,000 (in MB).	Yes
Shipping Interval	Time interval for shipping between 60 and 3,600 seconds. If you set it to 5 minutes, a log file is generated for your log data every 5 minutes, and the log files generated will be shipped together to your bucket at a regular interval (within half an hour).	The value must be a number ranging from 60 to 3,600 (in seconds).	Yes

Enter partition formats based on the requirements of the strftime format. Different partition formats may affect the paths of files shipped to COS. The following example describes how to use partition formats. For example, if a file is shipped to the bucket_test bucket, the directory prefix is logset/, and the shipping time is 17:14, July 31, 2018, the corresponding shipping file path will be as follows:

Bucket Name	Directory Prefix	Partition Format	COS File Path
bucket_test	logset/	%Y/%m/%d	bucket_test:logset/2018/7/31_{random}_{index}
bucket_test	logset/	%Y%m%d/%H	bucket_test:logset/20180731/14_{random}_{index}
bucket_test	logset/	%Y%m%d/log	bucket_test:logset/20180731/log_{random}_{index}

Click Next to enter the advanced configuration page. Set shipping format to json and set other parameters.

The configuration items are described as follows:

Configuration Item	Description	Rule	Required
Compressed Shipping	You can choose whether to compress log files before shipping. The size of an uncompressed file to be shipped is limited to 10 GB. Log files can be compressed with gzip, lzop, or Snappy.	Enabled/Disabled	Yes

Advanced options (optional)
You can enable advanced options to filter logs based on log content before shipping.

Up to 5 shipping filtering rules are allowed, among which is the "AND" logic, i.e., log files will be shipped only when all the rules are met.

a. Specify a key and set a filtering rule to perform regex extraction on the key.
b. Use "()" to capture objects that need to match the value and enter the value to match. The system performs a match according to the regular expression in the shipping rule, extracts the content of the capture group "()", and compares it with the value. If the captured content is equal to the value, the log data will be shipped.
Sample 1:
Set the field name to status, with the key-value pair in the format of status:404. If you want to ship the log where the value of the status field is 404, set the filtering rule to (.*).

Sample 2:
Specify a field as http_host. For example, if the key-value pair is http_host:172.16.19.20 and you want to ship logs with an http_host field starting with "172.16", the filtering rule should be ^(\d+\.\d+)\..*.