--- title: "Key Management Service - Pushing logs to Logs Data Platform" description: "- An OVHcloud customer account" url: https://docs.us.ovhcloud.com/en/manage-and-operate/kms/key-management-service-pushing-logs-to-logs-data-platform lang: en --- > For AI agents: the complete documentation index is available at https://docs.us.ovhcloud.com/en/llms.txt, the full documentation bundle is available at https://docs.us.ovhcloud.com/en/llms-full.txt. # Key Management Service - Pushing logs to Logs Data Platform ## Requirements - An [OVHcloud customer account](https://docs.us.ovhcloud.com/en/account/account-information/create-account.md) - An [OVHcloud KMS ordered, and an access certificate created](https://docs.us.ovhcloud.com/en/manage-and-operate/kms/quick-start.md) - A [Logs Data Platform](https://us.ovhcloud.com/identity-security-operations/logs-data-platform/) service with [at least one data stream created](https://docs.us.ovhcloud.com/en/manage-and-operate/logs-data-platform/getting-started.md)   ## Instructions ### Description OVHcloud KMS has a native integration with [Logs Data Platform](https://docs.us.ovhcloud.com/en/manage-and-operate/logs-data-platform/service-logs.md) for logs management.   ### Logs direct access From the OVHcloud Control Panel, navigate to your `Key Management Service` via the `Identity, Security & Operations` menu. Once there, click the `Logs` tab. This tab displays all KMS logs in real time. A selector allows you to switch the display between the two types of logs: - REST API audit logs. - KMIP audit logs.   ### Logs access through LDP From the `Logs` tab, you can `Subscribe` to an LDP data stream. Once the subscription is enabled, all the logs will be pushed to [Logs Data Platform](https://us.ovhcloud.com/identity-security-operations/logs-data-platform/) to archive generated logs and perform advanced searches, and create alerts or visualizations. For more information, please refer to our [Quick Start for Logs Data Platform](https://docs.us.ovhcloud.com/en/manage-and-operate/logs-data-platform/getting-started.md) guide.   ### Available logs details KMS logs contain the following information: - REST API Logs are displayed with this format: ``` {{ http_method }} {{ http_path }} - {{ http_status }} - identity: {{ iam_identities }} - operation: {{ iam_operation }} on {{ res_urn }} - from {{ip}} with certificate {{cert_id}} - request id: {{ request_id }} ``` **Example:** ``` INFO | GET /v1/servicekey/77f0a3f6-c2ef-4e76-xxxx-xxxxxxxxxxxx - 200 - identity: urn:v1:us:identity:group:xx1111-ovh/john.smith - operation: okms:apiovh:serviceKey/get on urn:v1:us:resource:okms:8d1c84cc-1128-4629-xxxx-xxxxxxxxxx/serviceKey/77f0a3f6-c2ef-4e76-xxxx-xxxxxxxxxxxx - from Manager/APIv2 - request id: us.manager-5.684c3abe.3880620.2080cff16eaa5539bf92cxxxxxxxx ``` Elements that can be pushed to Logs Data Platform: | **Field** | **Description** | | --------------- | --------------------------------------- | | domain\_id | OKMS domain ID | | request\_id | request ID | | type |   | | log\_level | Log priority level | | client\_ip | IP of the client making the request | | tls\_cert\_id | Authentication certificate ID used | | res\_urn | target resource URN | | region | OKMS domain region | | iam\_operation | IAM action evalutated | | iam\_identities | IAM identity used for rights evaluation | | http\_path | Request path | | http\_status | HTTP answer status | | http\_method | Request method | | err\_category | Error category | - KMIP Logs are displayed with this format: ``` {{ http_method }} {{ http_path }} - {{ http_status }} - identity: {{ iam_identities }} - operation: {{ iam_operation }} on {{ res_urn }} - from {{ip}} with certificate {{cert_id}} - request id: {{ request_id }} ``` **Example:** ``` INFO | GET on urn:v1:us:resource:okms:8d1c84cc-1128-4629-xxxx-xxxxxxxxxxx/kmip/ff55638c-3e86-4cb3-xxxx-xxxxxxxx - identity: urn:v1:us:identity:account:xx1111-ovh - operation: okms:kmip:get - from XXX.XXX.XXX.XXX with certificate e7850a19-a5de-4527-xxxx-xxxxxxxxx - request id: OKMS.db61c455-abfa-4a66-xxxx-xxxxxxxxxxx ``` Elements that can be pushed to Logs Data Platform: | **Field** | **Description** | | --------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | domain\_id | OKMS domain ID | | request\_id | Request ID | | log\_level | Log priority level | | client\_ip | IP of the client making the request | | tls\_cert\_id | Authentication certificate ID used | | res\_urn | Target resource URN | | region | OKMS domain region | | iam\_operation | IAM action evalutated | | iam\_identities | IAM identity used for rights evaluation | | kmip\_operation | KMIP operation used | | kmip\_reason | [Standard KMIP error code](https://docs.oasis-open.org/kmip/spec/v1.4/kmip-spec-v1.4.pdf#%5B%7B%22num%22%3A484%2C%22gen%22%3A0%7D%2C%7B%22name%22%3A%22XYZ%22%7D%2C69%2C720%2C0%5D) |   ## Go further Browse all the [Key Management Service (KMS) guides](https://docs.us.ovhcloud.com/en/manage-and-operate/kms/landing-page-kms.md). Browse the rest of the [OVHcloud US documentation](https://docs.us.ovhcloud.com/en/index.md) for guides on our other products and services. Learn more about [Key Management Service](https://us.ovhcloud.com/identity-security-operations/key-management-service/) on the OVHcloud US website.