Description

Ensure managed OVHcloud services that support logs forwarding, such as Managed Kubernetes, Public Cloud Databases, Load Balancer, and Key Management Service, are configured to send their logs to a Logs Data Platform data stream.

Rationale

Managed services produce logs that show errors, access attempts, and configuration changes, but these logs are short-lived and hard to search inside each service. Forwarding them to one place keeps a searchable record, allows alerts, and makes it possible to investigate incidents across services.

Impact

  • Service logs are kept in one searchable place

  • Supports monitoring, alerts, and investigations

  • Logs Data Platform storage is billed

Default Value

By default, managed service logs are not forwarded to Logs Data Platform.

Pre-Requisites

  • A Logs Data Platform account in the same OVHcloud account with at least one active data stream

  • Permission to manage the services

Test Plan

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. In the left-hand menu, select Public Cloud and choose your project.

  3. For each managed service (Kubernetes clusters, databases, load balancers, KMS), open its Logs tab and check the subscription panel for an active subscription to a data stream.

  4. If a service that supports forwarding has none configured, follow the implementation steps.

Implementation Steps

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. In Identity, Security & Operations, select Logs Data Platform, open your LDP account, go to the Data stream tab, and click Copy stream ID on the target stream.

  3. In the left-hand menu, select Public Cloud and choose your project.

  4. Open the service and its Logs tab. In the subscription panel, select your Logs Data Platform account and click Subscribe on the target data stream.

  5. Confirm that logs appear in the data stream.

Backout Plan

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. In the left-hand menu, select Public Cloud and choose your project.

  3. Open the service's Logs tab and click Unsubscribe on the data stream.

Reference