NAT Gateway provides the flow log collection feature to collect and analyze NAT Gateway traffic and generate logs and analysis charts. This helps you stay informed of cross-region communication and quickly locate and solve problems based on the logs, thus improving the business availability and Ops efficiency.
- The flow log feature is in beta test. To try it out, submit a ticket for application.
- The Flow Log service is free of charge, but the data stored in CLS will be charged at the standard prices of CLS.
- The flow log data is stored in CLS. Make sure that you have granted the Flow Log service permissions to access CLS before querying log data in CLS.
|Name||The name of the flow log.|
|Collection range||Select “NAT Gateway”.|
|NAT gateway||The information about the NAT gateway.|
|Collection type||Specify the type of traffic to be collected by the flow log: All traffic, or the traffic rejected or accepted by security groups or ACL.|
|Logset||Specify the storage location in CLS for flow logs. If you already have a logset, select it directly; otherwise, keep Created by system selected, so that the system will create one for you. You can also click Create to create one in the CLS console.|
|Log topic||Specify the minimum dimension of log storage, which is used to distinguish between different types of logs, such as `Accept` log. If you already have a log topic, select it directly; otherwise, keep **Created by system** selected, so that the system will create one for you. You can also go to the CLS console to create one.
|Tag key||Click Advanced options to enter or select a tag key for the identification and management of the flow log.|
|Tag value||Click Advanced options to enter or select a tag value. It can also be left empty.|
You can view the record of a newly created flow log in CLS after six minutes upon the creation (one minute for the capture window and five minutes for data publishing).