Shulou(Shulou.com)05/31 Report--

This article shows you how to use the NAS log analysis function, the content is concise and easy to understand, it will definitely brighten your eyes. I hope you can get something through the detailed introduction of this article.

Summary: the new NAS Log Analysis feature is designed to help users better monitor file system resources. Through this function, users can easily track system performance problems, record data operations on the file system, delete audit files and other related operations, effectively monitor the overall and detailed information of file system resources in each region, and give a real-time alarm.

NAS log analysis feature is a log analysis feature built into the NAS console jointly developed by Aliyun File Storage (NAS) and Log Service (SLS). The log analysis service can write log data of 10M/s in real time, and analyze log records of 10 million lines per second in real time, with a processing delay of less than seconds.

1. How to open it

At present, the NAS log analysis feature is in the online public trial stage, which requires users to actively apply for activating the service.

The specific steps are as follows:

Step 1, apply for activation

Log in to the NAS console of Aliyun's official website, find the column "NAS is now active for user-level monitoring" on the front page of the console, and click the "apply" button.

Cdn.com/569064931aef6d817ed698685dda1740b540b347.png ">

Step 2, fill in the application information

After filling in the specific application information, click submit

On the authorization page of the jump, click "agree to authorize".

At this point, you have completed the complete configuration of the NAS log analysis feature. NAS log data has been imported into your own log storage, and the log service will analyze your NAS log data in the background, and then you can see the relevant log analysis information.

two。 User's guide

After the user completes the above service activation and configuration, the user can browse the relevant log analysis data.

2.1 Log Management

Log in to the NAS console of Aliyun's official website, and click "Log Analysis"-> "Log Management" in the left navigation bar to show the log management view of NAS log analysis function.

The overview view shows the overall situation of file system resource access in the corresponding area, including the number of file systems analyzed, total write and read traffic, the number of recently accessed clients, the client distribution of each file system, the overall distribution of creation, deletion, read and write data, and so on.

2.2.2 detail view

The detail view shows the details of the data operation of a specific file system.

Trend of write / read traffic

Shows the data flow statistics per unit time of each file system when reading and writing data.

Average write / read operation size

Shows the average block size of a single IO in a unit time when each file system reads and writes data.

Abnormal operation distribution

Shows the distribution of abnormal operations in each file system, such as authentication failures, network errors, read and write errors, etc.

Operation state distribution

Shows the distribution of overall operations within each file system

2.2.3 Audit View

The audit view shows audit information and history of sensitive operations in each file system

File operation trend chart

The timeline shows the distribution and trend of common operations for all file systems in the region, including reading files, writing files, deleting files, creating files, and so on.

List of recently deleted files

Shows a historical list of directories where recent deletions occurred in this area, including the inode of the parent directory where the deleted files are located, the file system, the source IP from which the deletion was performed, the NFS version number of the mounted file system, the number of recently deleted files in this directory, and so on.

Recently created file

Shows a historical list of directories where recent creation operations occurred in this area, including the inode of the parent directory where the created files are located, the file system, the source IP from which the creation operation was performed, the NFS version number of the mounted file system, the number of recently created files in this directory, and so on.

Recently write file Top

Shows the Top list of files with recent write operations in this area, including the file system where the write operation resides, the file inode of the write operation, the size of the write data in the statistical time, the number of clients performing the write operation, the NFS version number of the mounted file system, and so on.

Recently read file Top

Shows the Top list of the most recent read operations in this area, including the file system where the read operation resides, the file inode of the read operation, the size of the read data in the statistical time, the number of clients performing the read operation, the NFS version number of the mounted file system, and so on.

2.3 detailed explanation of log field

After the user completes the log configuration, the access log of the file system will be dumped to the Log Store of the SLS. You can enter the SLS details page to view the specific NAS log data through the operation bar "Click to go" in the "Log Management" list. The specific log fields are defined as follows:

Field name field value field meaning ArgIno226 file system inode number AuthRc0 authorization return code NFSProtocolRc0NFS protocol return code OpListnullNFSv4 Procedures number Proc1NFSv3 Procedures number RWSize-1 read and write size, unit byte RequestId5ACF5CD506EAC7A508F056DF request IDResInonulllookup resource inode number SourceIp172.18.159.169 client IPUser* user IDVers3NFS protocol version number Vip172.18.158.178 server IPVolume* file system IDmicrotime1523539157201995 request time, unit microsecond 3. Matters needing attention

-about whether log analysis is cross-region

Not across regions.

The NAS log analysis feature is currently divided into regions (Region), such as North China 1, North China 2, East China 1, East China 2. Different regions generate their own log analysis views, and the log data of multiple file systems in the same region are aggregated. Currently, aggregation analysis of cross-region file systems is not supported.

-support for file system types

Currently, NAS log analysis feature only supports NFS protocol type, and other types such as SMB will be supported in the future.

-about the delay of log analysis results

Under normal circumstances, the maximum delay of NAS logs is less than 10 seconds from being collected to dumping to the final analysis of the result.

-about charges

NAS log analysis function, which is currently in the stage of applying for public testing, will not incur any fees during this period. After the end of the public trial phase, NAS can open log data to users free of charge, but log storage and log analysis need to use the relevant features of SLS. Its billing standard can be found in the billing instructions of current Log Service (SLS).

The above is how to use the NAS log analysis function. Have you learned any knowledge or skills? If you want to learn more skills or enrich your knowledge reserve, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.