Simple Log Service:What is Simple Log Service

What can Simple Log Service do

Unified data pipeline/data lake

SLS supports dozens of collection methods to meet the needs of unified real-time collection, processing and cleaning, real-time consumption, and distribution of massive data. It serves as an enterprise data bus and data pipeline for business analytics and big data analysis scenarios, providing tiered storage for data with different lifecycles. It is widely used in online education, gaming, finance, entertainment, and other industries.

Observability and operations platform

SLS supports unified storage and joint analysis of observable data such as Log/Metric/Trace. Combined with AIOps tools such as intelligent inspection, intelligent prediction, and root cause analysis, it automatically performs anomaly detection, unified alert management, and quickly troubleshoots and locates problems, improving stability and product experience while controlling the overall health of the system. It is widely used by customers in internet, gaming, transportation, e-commerce, education, and other industries.

Business analytics data platform

Based on Simple Log Service, you can integrate system data and business data to provide more data insights for your business, providing strong support for risk prevention and business strategy adjustment. Compared to T+1 data display in BI systems, SLS performs business observation and achieves data analysis with minute-level latency.

Log security analytics and audit

For users with log security analytics, operation audit, and classified protection compliance requirements, SLS Log Audit can help customers build a one-stop log security audit solution. It automatically collects data from various cloud products, supports unified collection across multiple accounts and regions, and automatically collects logs from new instances to avoid missing data. It supports centralized storage and provides storage, query, and information aggregation required for auditing. SLS Log Audit has built-in audit policies and can connect to third-party SIEM systems to meet the log security analytics and audit needs of customers in finance, new retail, manufacturing, MCN, and other industries.

Why choose Simple Log Service

• Provides comprehensive and unified data access solutions: Capable of accessing Log, Metric, and Trace data, covering IoT, mobile, and server-side comprehensively. Supports access to cloud product logs, open-source system logs, multi-cloud environment logs, and local server logs. High collection efficiency, low resource consumption, stable and reliable, with no data loss or errors.

• Provides one-stop platform services: Supports one-stop data lifecycle management functions such as collection, analysis, processing, visualization, shipping, and alerting.

• Unified storage platform: Solves the problems of heterogeneous and unstable observability backend storage, and supports connection to stream computing platforms.

• Possesses intelligent and efficient data analysis capabilities: Second-level analysis of tens of billions of data records, artificial intelligence for IT operations (AIOps) capabilities, intelligent anomaly detection, anomaly prediction, and root cause analysis capabilities.

• Problem troubleshooting and alerting: Monitors infrastructure, improves problem location and troubleshooting efficiency, supports intelligent noise reduction, eliminates alert storms, and realizes the true value of alerts.

• Provides elastic, low-cost cloud services: Simple Log Service is a fully managed, maintenance-free cloud service with petabyte-level elastic scaling capability per day. pay-as-you-go billing, where you only pay for actual usage, reducing the total cost of ownership (TCO) by more than 50%.

• Provides out-of-the-box applications: CloudLens cloud product observability, FinOps cost analysis, etc., ensuring efficient multi-dimensional operations capabilities and cost control, with an open and rich product ecosystem compatible with dozens of open-source engines and tools.

Features

Data collection

Supports unified collection of observable data (such as Log/Metric/Trace) from various sources including client logs, IoT devices, server and application logs, standard protocols, and Alibaba Cloud product logs. It also supports various network transmission methods such as internal network, public network, and Global Accelerator. It completely integrates data across accounts, across clouds, and between cloud and on-premises scenarios, while ensuring stable and reliable collection through features like breakpoint resumption and elastic scaling.

Data processing

Simple Log Service provides out-of-the-box, fully managed, horizontally scalable, real-time processing functions for data organization, enrichment, forwarding, desensitization, and filtering. It has built-in rich processing functions and text processing operators with high-throughput streaming capabilities. Processing can be performed during data collection, during writing, or after writing, with results visible in seconds.

Data storage

Simple Log Service provides a unified storage platform that breaks down data silos and supports intelligent storage tiering management. Through lifecycle management, hot data is automatically converted to queryable cold data, reducing long-term storage costs. Storage redundancy ensures data durability and stability while maintaining capabilities for log querying, analysis, visualization, alerting, shipping, and processing. It supports scenario-based specification selection, offering more cost-effective query-oriented storage specifications for pure query scenarios.

Query and analysis

Simple Log Service supports second-level querying and analysis of tens of billions of logs based on data indexing, along with lightweight query and analysis capabilities based on scanning mode. The log engine has nearly 100 built-in query and analysis functions. It also supports intelligent machine learning algorithms such as inspection, anomaly detection, and root cause analysis, along with scheduled SQL queries and high-performance exact queries (SQL dedicated). You can also query with external data sources or use third-party tools for querying.

Visualization

Simple Log Service has built-in rich dashboards that support visualization of query and analysis results. It provides more than 10 types of statistical charts, including tables, line charts, bar charts, maps, etc., and supports custom dashboards based on statistical charts (supporting console embedding and drill-down analysis). It also supports integration with third-party visualization systems (such as Grafana, QuickBI, etc.).

Alerting

Provides one-stop alerting functions, including alert monitoring, alert management, notification (action) management, etc. It supports unified alerting across multiple sources, accounts, and conditions, with intelligent noise reduction to eliminate alert storms and realize the true value of alerts. It supports multiple notification methods such as phone calls, text messages, DingTalk, WeChat, Lark, webhooks, etc.

Data output and integration

Simple Log Service maintains maximum openness and compatibility with upstream and downstream data sources, seamlessly integrating with dozens of open-source or self-developed big data systems. It supports data consumption and subscription for scenarios such as Spark Streaming consumption, Flume consumption, and Flink consumption. It also supports real-time data shipping to cloud products such as OSS, MaxCompute, and TSDB.

Log audit

Log Audit Service supports all features of Simple Log Service. Log Audit Service also supports automated and centralized log collection from cloud services across Alibaba Cloud accounts in real time. Then, you can audit the collected logs. In addition, Log Audit Service stores data required for audit and allows you to query and aggregate the data.

Billing

Simple Log Service supports the pay-as-you-go billing method. You are charged based on your actual usage. Compared with a self-managed approach to deploy the Elasticsearch, Logstash, and Kibana (ELK) stack, Simple Log Service allows you to reduce the total cost by 50%. For more information about the metering items and billing items of Simple Log Service, see Billing items of the pay-as-you-go billing method and Billing items of the pay-by-data-volume billing method. If you need to stop billing, see How to disable Simple Log Service or stop billing.

Get started

We recommend that you use Simple Log Service in the following order:

FAQ

How to disable Simple Log Service or stop billing

For more information, see How to disable Simple Log Service or stop billing.