Description

Ensure each Public Cloud Database service is configured to forward its logs to a Logs Data Platform data stream, so logs are kept beyond the short built-in retention and can be searched.

Rationale

Public Cloud Databases keep only a small number of recent log lines (for example 1000 lines). Errors, failed logins, and suspicious queries are quickly lost. Forwarding logs to Logs Data Platform keeps a searchable history for troubleshooting, alerts, and investigations.

Impact

  • Database logs are kept and searchable

  • Supports alerts and investigations

  • Logs Data Platform storage is billed

Default Value

By default, database logs are not forwarded, and only 1000 recent log lines are kept.

Pre-Requisites

  • Permission to manage the database service

  • A Logs Data Platform account with an active data stream

Test Plan

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. In the left-hand menu, select Public Cloud and choose your project.

  3. In the left-hand menu, select Databases (under Databases & Analytics), then click the database service to open it.

  4. Open the Logs tab and check the subscription panel for an active subscription to a data stream.

  5. If not, follow the implementation steps.

Implementation Steps

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. In Identity, Security & Operations, select Logs Data Platform, open your LDP account, go to the Data stream tab, and click Copy stream ID on the target stream.

  3. In the left-hand menu, select Public Cloud and choose your project.

  4. In the left-hand menu, select Databases (under Databases & Analytics), then click the database service to open it.

  5. Open the Logs tab, click Subscribe, and select your Logs Data Platform account and data stream.

  6. Alternatively, run POST /cloud/project/{serviceName}/database/{engine}/{clusterId}/log/subscription with the streamId and kind.

  7. Confirm that logs appear in the data stream.

Backout Plan

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. In the left-hand menu, select Public Cloud and choose your project.

  3. In the left-hand menu, select Databases (under Databases & Analytics), then click the database service to open it.

  4. Open the Logs tab and click Unsubscribe on the data stream.

Reference