Logs are an important data source for detecting and tracing security incidents, and the observability service can provide log management features for associated clusters. On the log search page, you can query logs by cluster, node, service, level, and keyword. This helps you quickly locate periods with a large number of error logs and identify the causes of issues. You can also use the Syslog export feature to send logs from nodes to a Syslog server and store them together with your application logs, avoiding log data silos. From a single interface, you can query all logs and perform correlation analysis between node-generated logs and application logs.
