/sap-btp-cloud-logging

name: sap-btp-cloud-logging
description: |
  This skill provides comprehensive guidance for SAP Cloud Logging service on SAP BTP.
  Use when setting up Cloud Logging instances, configuring log ingestion from Cloud Foundry
  or Kyma runtimes, implementing OpenTelemetry observability, analyzing logs/metrics/traces
  in OpenSearch Dashboards, configuring SAML authentication, managing certificates, or
  troubleshooting ingestion issues. Covers service plans (dev/standard/large), all 4
  instance creation methods (BTP Cockpit, CF CLI, BTP CLI, Service Operator), all 4
  ingestion methods (Cloud Foundry, Kyma, OpenTelemetry, JSON API), and security best practices.
license: GPL-3.0
metadata:
  maintainer: "Eduard Jiglau"
  maintainer_email: "hello@sap-ai-skills.com"
  website: "https://sap-ai-skills.com"
  version: "2.4.1"
  last_verified: "2025-11-27"
  source_documentation: "https://github.com/SAP-docs/btp-cloud-logging"
  sap_help_portal: "https://help.sap.com/docs/cloud-logging"

SAP BTP Cloud Logging Skill

Related Skills

• **sap-btp-cloud-platform**: Use for BTP subaccount setup, entitlements, and runtime context
• **sap-btp-cloud-identity-services**: Use for SAML/IAS authentication and trust configuration
• **sap-btp-developer-guide**: Use for application observability patterns across CAP and BTP apps
• **sap-btp-best-practices**: Use for production monitoring and operations governance

When to Use This Skill

Use this skill when creating Cloud Logging instances, choosing service plans, configuring Cloud Foundry/Kyma/OpenTelemetry/JSON ingestion, rotating certificates, setting up OpenSearch dashboards, enabling SAML, or troubleshooting missing logs, metrics, traces, or alerts.

Table of Contents

• [Service Overview](#service-overview)
• [Service Plans](#service-plans)
• [Quick Start](#quick-start)
• [Prerequisites](#prerequisites)
• [Instance Creation Options](#instance-creation-options)
• [Configuration Parameters](#configuration-parameters)
• [Full Configuration Example](#full-configuration-example)
• [Data Ingestion Methods](#data-ingestion-methods)
• [1. Cloud Foundry Runtime](#1-cloud-foundry-runtime)
• [2. Kyma Runtime](#2-kyma-runtime)
• [3. OpenTelemetry API (OTLP)](#3-opentelemetry-api-otlp)
• [4. JSON API](#4-json-api)
• [Certificate Management](#certificate-management)
• [Certificate Validity](#certificate-validity)
• [Bundled Resources](#bundled-resources)
• [Root CA Rotation (3-Step Process)](#root-ca-rotation-3-step-process)
• [OpenSearch Dashboards](#opensearch-dashboards)
• [Access](#access)
• [Pre-built Dashboards](#pre-built-dashboards)
• [Custom Dashboards & Alerting](#custom-dashboards--alerting)
• [Index Patterns Summary](#index-patterns-summary)
• [Security Best Practices](#security-best-practices)
• [Security Recommendations](#security-recommendations)
• [SAML Authentication Setup](#saml-authentication-setup)
• [Backup & Recovery](#backup--recovery)
• [Automatic Backups](#automatic-backups)
• [Restoration Process](#restoration-process)
• [Common Issues & Troubleshooting](#common-issues--troubleshooting)
• [Reference Files](#reference-files)
• [Documentation Links](#documentation-links)
• [Official Sources](#official-sources)
• [Related Documentation](#related-documentation)
• [Data Protection Notice](#data-protection-notice)

Service Overview

SAP Cloud Logging is an instance-based observability service built on OpenSearch that stores, visualizes, and analyzes application logs, metrics, and traces from SAP BTP Cloud Foundry, Kyma, Kubernetes, and other runtime environments.

**Key Capabilities:**

• Ingest logs, metrics, and traces via OpenTelemetry (OTLP) or JSON API
• Ingest application and request logs from Cloud Foundry runtime
• Configure data retention (1-90 days)
• Visualize and analyze data in OpenSearch Dashboards
• Create custom dashboards and alerts
• SAML authentication via SAP Identity Authentication Service

---

Service Plans

| Plan | Capacity | Use Case | Auto-Scaling | |------|----------|----------|--------------| | **dev** | 7.5 GB fixed | Evaluation only | No | | **standard** | 75 GB - 375 GB | Production (100 logs/sec) | Yes | | **large** | 750 GB - 3.75 TB | Production (1000 logs/sec) | Yes |

**Important:** Plan updates are not supported. Migration requires running instances in parallel.

---

Quick Start

Prerequisites

1. SAP BTP Global Account 2. Subaccount with Cloud Logging entitlement 3. (Recommended) SAP Cloud Identity Services tenant for SAML authentication

**Note for SAP Build Code Users:** If using SAP Build Code, follow the SAP Build Code Initial Setup instructions instead. Cloud Logging in SAP Build Code is available for **evaluation purposes only**.

Instance Creation Options

Choose one method based on your workflow:

**Option 1: SAP BTP Cockpit (UI)** 1. Navigate to Subaccount → Instances and Subscriptions → Create 2. Select `cloud-logging` service and plan 3. Configure parameters (see Configuration section) 4. Create service key for credentials

**Option 2: Cloud Foundry CLI**

cf create-service cloud-logging standard my-cls-instance -c '{
  "retention_period": 14,
  "backend": { "max_data_nodes": 10 },
  "ingest": { "max_instances": 10 }
}'

# Wait for provisioning
cf services  # Check "last operation" status

# Create service key
cf create-service-key my-cls-instance my-cls-key
cf service-key my-cls-instance my-cls-key

**Option 3: SAP BTP CLI**

btp create services/instance \
  --subaccount <SUBACCOUNT_ID> \
  --name my-cls-instance \
  --offering-name "cloud-logging" \
  --plan-name standard \
  --parameters '{"retention_period": 14}'

# Create binding
btp create services/binding \
  --subaccount <SUBACCOUNT_ID> \
  --name my-cls-binding \
  --instance-name my-cls-instance

# Get credentials
btp get services/binding --name my-cls-binding --subaccount <SUBACCOUNT_ID>

**Option 4: SAP BTP Service Operator (Kubernetes/Kyma)**