Overview
Cloud.gov Logs is the platform’s centralized, FedRAMP-authorized log and metrics service. Cloud.gov Logs is a secure, multi-tenant environment built on OpenSearch.
Logs and metrics from the platform are ingested to Cloud.gov Logs in near real-time.
Customers can view, search, and analyze this data using OpenSearch Dashboards.
What Cloud.gov Logs provides
| Capability | Description |
|---|---|
| Log ingestion | Application logs and metrics automatically stream from the Cloud Foundry platform. |
| Brokered service metrics | Metrics from brokered services (RDS, S3, OpenSearch) are automatically collected. |
| Visualization | Built-in dashboards summarize performance, usage, and error data. |
| Search and export | Users can query logs and metrics, then export to CSV or external analysis tools. |
| External forwarding (log drains) | Customers can configure secure drains to their own SIEM or storage. |
| Access control | Tenant-based OpenSearch Dashboards access reflects your platform roles. |
| Retention | Logs retained 12 months (active) + 18 months (cold) storage per M-21-31. |
Getting your logs into the system
Application logs and metrics
When you run cf push, your app’s output streams from STDOUT and STDERR directly
into Cloud.gov Logs. No additional setup is required.
Metrics such as CPU, memory, and disk utilization are also ingested automatically.
Brokered services
Metrics for brokered services - for example, AWS RDS, S3, or OpenSearch - are collected automatically.
To enable log ingestion for specific brokered services, contact support@cloud.gov.
Getting started
- Log in: Go to https://logs.fr.cloud.gov
- Select a tenant: Each tenant maps to an organization you can access on the platform
- Browse dashboards: View real-time or historical metrics using the available dashboards
- Search logs: Search your logs and metrics
- Export results: Generate CSV reports on-demand or on a schedule
- Create your own dashboards: Build and share dashboards to monitor your team’s key metrics