Alicloud Observability Sls Log Query

Query and troubleshoot logs in Alibaba Cloud Log Service (SLS) using query|analysis syntax and the Python SDK. Use for time-bounded log search, error investi...

Security Scan

The skill appears to implement Alibaba Cloud SLS log queries as described, but the package metadata omits the sensitive environment variables the code and README explicitly require — an inconsistency you should understand before installing or providing credentials.

Purpose & Capability

The skill's name, description, SKILL.md, and Python scripts all implement Alibaba Cloud Log Service (SLS) querying via aliyun-log-python-sdk — that matches the stated purpose. However the registry metadata lists no required environment variables or primary credential, while the SKILL.md and both scripts require ALIBABA_CLOUD_ACCESS_KEY_ID, ALIBABA_CLOUD_ACCESS_KEY_SECRET, SLS_ENDPOINT, SLS_PROJECT, and SLS_LOGSTORE. This mismatch (manifest claims no credentials but code needs them) is an incoherence to address.

Instruction Scope

Runtime instructions and included scripts are limited to composing SLS queries, calling the official Python SDK, printing JSON-formatted logs, and saving validation/output artifacts under an output directory. The SKILL.md does not instruct the agent to read unrelated system files or send data to third-party endpoints beyond SLS.

Install Mechanism

There is no install spec (instruction-only skill with included scripts). The README recommends installing aliyun-log-python-sdk via pip inside a virtualenv — a standard, low-risk approach. No downloads from arbitrary URLs or extract/install steps are present.

Credentials

Requesting Alibaba Cloud Access Key ID/Secret and SLS-specific variables is proportionate to querying SLS. However the registry metadata fails to declare these required environment variables or a primary credential, creating a misleading security picture. Also note that logs returned by SLS may contain sensitive data; the scripts print and instruct saving raw log contents to output files, which could expose secrets if present in logs. Prefer least-privilege or temporary credentials (read-only SLS access) when using this skill.

Persistence & Privilege

The skill is not marked always:true, does not request persistent system-wide changes, and does not modify other skills' configurations. Autonomous invocation (disable-model-invocation:false) is the platform default and not in itself concerning here.

What to consider before installing

This skill implements Alibaba Cloud SLS queries and legitimately needs ALIBABA_CLOUD_ACCESS_KEY_ID and ALIBABA_CLOUD_ACCESS_KEY_SECRET plus SLS_* variables — but the registry metadata omitted those requirements. Before installing: (1) review and confirm you trust the skill source; (2) run it in an isolated environment/venv; (3) provide least-privilege or temporary credentials (read-only SLS/LogService access), not your full account keys; (4) be aware the scripts print and save raw log entries (logs can contain secrets), so inspect output paths and rotate any keys accidentally leaked; (5) verify aliyun-log-python-sdk is installed from the official PyPI package and optionally inspect the package source. If the metadata omission concerns you, ask the publisher to correct manifest declarations or provide an explanation.

Category: service

SLS Log Query and Troubleshooting

Use SLS query|analysis syntax and Python SDK for log search, filtering, and analytics.

Prerequisites

• Install SDK (virtual environment recommended to avoid PEP 668 restrictions):

python3 -m venv .venv
. .venv/bin/activate
python -m pip install -U aliyun-log-python-sdk

• Configure environment variables:
  • ALIBABA_CLOUD_ACCESS_KEY_ID
  • ALIBABA_CLOUD_ACCESS_KEY_SECRET
  • SLS_ENDPOINT (e.g. cn-hangzhou.log.aliyuncs.com)
  • SLS_PROJECT
  • SLS_LOGSTORE(supports a single value or comma-separated values)

Query Composition

• Query clause: filters logs (e.g. status:500).
• Analysis clause: statistical aggregation, format query|analysis.
• Example: * | SELECT status, count(*) AS pv GROUP BY status

See references/query-syntax.md for full syntax.

Quickstart (Python SDK)

import os
import time
from aliyun.log import LogClient, GetLogsRequest

client = LogClient(
    os.environ["SLS_ENDPOINT"],
    os.environ["ALIBABA_CLOUD_ACCESS_KEY_ID"],
    os.environ["ALIBABA_CLOUD_ACCESS_KEY_SECRET"],
)

project = os.environ["SLS_PROJECT"]
logstore = os.environ["SLS_LOGSTORE"]

query = "status:500"
start_time = int(time.time()) - 15 * 60
end_time = int(time.time())

request = GetLogsRequest(project, logstore, start_time, end_time, query=query)
response = client.get_logs(request)
for log in response.get_logs():
    print(log.contents)

Script quickstart

python skills/observability/sls/alicloud-observability-sls-log-query/scripts/query_logs.py \
  --query "status:500" \
  --last-minutes 15

Optional args: --project, --logstore(repeatable, or comma-separated values), --endpoint, --start, --end, --last-minutes, --limit, --parallel.

Troubleshooting script

python skills/observability/sls/alicloud-observability-sls-log-query/scripts/troubleshoot.py \
  --group-field status \
  --last-minutes 30 \
  --limit 20

Optional args: --error-query, --group-field, --limit, --logstore(repeatable, or comma-separated values), --parallel, plus the time range args above.

Workflow

1. Ensure Logstore indexing is enabled (queries/analysis fail without index).
2. Write query clause and append analysis clause when needed.
3. Execute with SDK/script and inspect results.
4. Control returned rows with limit; narrow time range when needed.

Validation

mkdir -p output/alicloud-observability-sls-log-query
for f in skills/observability/sls/alicloud-observability-sls-log-query/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/alicloud-observability-sls-log-query/validate.txt

Pass criteria: command exits 0 and output/alicloud-observability-sls-log-query/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/alicloud-observability-sls-log-query/.
• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

References

• Syntax and examples:references/query-syntax.md

• Python SDK initialization and queries:references/python-sdk.md

• Troubleshooting templates:references/templates.md

• Source list: references/sources.md