What Kinds of Logs Can Cloud Log Service Collect?

Cloud server application logs.

Container application logs, including standard container output logs and file logs.

How to Install the Collector on a Cloud Server?

Cloud Log Service console provides the command for collector installation. You need to execute this command on the target cloud server to install the collector. For details, see Ingesting ECS–Text Logs.

Which Delimiter Method Is Supported for Data Collection Configuration?

Structuring parsing of logs means that Cloud Log Service data is stored on the Cloud Log Service platform as key-value pairs. When the log data is structured, you can perform log retrieval, analysis, and processing based on the specified key-values on the Cloud Log Service console. Currently, the collector provides multiple parsing methods, the details are as follows:

Parsing Methods	Description
Single-line Full Text	Single-line full text means that the log contains only one line of content. When logs are collected, a line break indicates the end of a log, that is, in log files, one log is separated from another with a line break. The log data itself will not be structured, and the log fields will not be extracted. Each log has a default field (message), and the collector stores log contents in the message. For details, see Collecting Text Logs–Single-line Full Text Mode.
Multi-line Full Text	Multi-line full text means that a piece of complete log data may span multiple lines. You need to specify the first-line regular expression for matching. When a certain line of log matches the preset regular expression, it is considered to be the beginning of a log, and the next beginning of a line is considered the end identifier of this log. The log content is also stored in the message field. For details, see Collecting Text Logs–Multi-line Full Text Mode.
Single-line Regular	Single-line regular mode is used to process structured logs. For logs containing one line of content, you need to specify a regular expression and the collector will extract multiple values from a complete log based on the regular expression. For details, see Collecting Text Logs–Single-line Regular Mode.
Multi-line Regular	Multi-line regular mode is used to process structured logs. For logs containing multiple lines of content, you need to specify a line beginning regular expression to match the beginning of the logs, and specify a regular expression to extract multiple values. For details, see Collecting Text Logs–Multi-line Regular Mode.
Single-line Delimiter	The single-line delimiter mode supports splitting a log into multiple values using delimiters to achieve structured processing. This mode is only applicable to single-line logs, and each complete log ends with a line break. For details, see Collecting Text Logs–Multi-line Delimiter Mode.
JSON	Supports parsing JSON logs of the Object type and extracts JSON log content as key-value pairs, that is, the key of the first layer of Object is used as a key and the value of the first layer of Object is used as a value. For details, see Collecting Text Logs–JSON Mode.

How to Check the Running Status of the Log Collector?

Execute service log-agent-user status on a server. If the message active (running) is displayed, it indicates that the log collector is up and running.

Otherwise, you can use the service log-agent-user restart command to restart the log collector.

Where Should I Install the Log Collector on My Server?

The log collector should be installed in the /app/cams/log-agent/ directory.

How to Deploy the Log Collection Plug-in in a Container Cluster?

You need to install the ctg-log-operator plug-in in the container cluster. For details on the installation, see Install Plug-in.

What Should I Do If the CPU Usage Is High When the Collector Is Running?

If the CPU usage is high when the collector running, check whether there are a large number of log files in the log collection path configured in the Cloud Log Service console. If there are, it is recommended to clear them regularly to reduce system resource occupation during log collection.