aliyun-sls-openclaw-integration

name	aliyun-sls-openclaw-integration
description	Use when the user needs to integrate OpenClaw with Alibaba Cloud SLS/Observability, including collector setup, machine groups, indexes, dashboards, collection configs, or Logtail bindings on Linux.
metadata	{"openclaw":{"emoji":"📊","requires":{"bins":"[Truncated]"}}}

OpenClaw SLS Integration

This skill provisions Alibaba Cloud SLS observability for OpenClaw on Linux and keeps reruns safe.

At a high level, execute this flow:

1. Check and install aliyun CLI (install latest when missing)
2. Install LoongCollector by project region (skip if already running)
3. Create an identifier-based machine group (local identifier + cloud machine group)
4. Create logstore index and dashboards
5. Create logstore collection config
6. Bind the collection config to the machine group

---

Capture Intent Before Execution

Before running commands, make sure the user intent is complete:

1. Confirm the target PROJECT and LOGSTORE.
2. Confirm Linux host access with sudo available.
3. Confirm AK/SK are already exported in environment variables.
4. If any required input is missing, ask for it first and do not run partial setup.

---

Prerequisites

Required:

• PROJECT: SLS project name
• LOGSTORE: SLS logstore name

Read from environment variables:

• ALIBABACLOUD_ACCESS_KEY_ID
• ALIBABACLOUD_ACCESS_KEY_SECRET
• ALIYUN_UID (used for the local UID file under /etc/ilogtail/users)

Recommended optional:

• ALIBABACLOUD_REGION_ID (auto-resolved from PROJECT when not set)

If you use different AK/SK variable names, export them to these standard names first.

---

Expected Result

After successful execution, the environment should contain:

• Running LoongCollector (or ilogtaild) on the host
• Machine group openclaw-sls-collector
• Logstore index created on the target LOGSTORE
• Dashboards openclaw-audit and openclaw-gateway
• Collection config openclaw-audit_${LOGSTORE}
• Config binding between openclaw-audit_${LOGSTORE} and openclaw-sls-collector

---

One-Time Execution Flow (Idempotent)

The commands below are designed as "exists -> skip" and are safe to rerun. Strict template mode: for index/config/dashboard payloads, always read from files in references/. Do not handcraft or simplify JSON bodies beyond required placeholder replacement.

set -euo pipefail

# ===== User inputs =====
: "${PROJECT:?Please export PROJECT}"
: "${LOGSTORE:?Please export LOGSTORE}"
: "${ALIBABACLOUD_ACCESS_KEY_ID:?Please export ALIBABACLOUD_ACCESS_KEY_ID}"
: "${ALIBABACLOUD_ACCESS_KEY_SECRET:?Please export ALIBABACLOUD_ACCESS_KEY_SECRET}"
: "${ALIYUN_UID:?Please export ALIYUN_UID}"

MACHINE_GROUP="openclaw-sls-collector"
CONFIG_NAME="openclaw-audit_${LOGSTORE}"

# 1) Install aliyun CLI if missing (Linux)
if ! command -v aliyun >/dev/null 2>&1; then
  if command -v apt-get >/dev/null 2>&1; then
    sudo apt-get update
    sudo apt-get install -y aliyun-cli
  elif command -v dnf >/dev/null 2>&1; then
    sudo dnf install -y aliyun-cli
  elif command -v yum >/dev/null 2>&1; then
    sudo yum install -y aliyun-cli
  elif command -v zypper >/dev/null 2>&1; then
    sudo zypper -n install aliyun-cli
  else
    echo "aliyun CLI not found. Install aliyun-cli manually for your Linux distribution." >&2
    exit 1
  fi
fi

# Export auth variables for aliyun CLI
export ALIBABACLOUD_ACCESS_KEY_ID
 ALIBABACLOUD_ACCESS_KEY_SECRET

() {
    /etc/init.d/loongcollectord status 2>/dev/null | grep -qi ; 
     0
  
    /etc/init.d/ilogtaild status 2>/dev/null | grep -qi ; 
     0
  
   1
}


REGION_ID=
 [ -z  ]; 
  REGION_ID=

 [ -z  ]; 
    >&2
   1


 ! is_loong_running; 
  wget  -O loongcollector.sh
   +x loongcollector.sh
  ./loongcollector.sh install 



 ! is_loong_running; 
   /etc/init.d/loongcollectord start >/dev/null 2>&1 || 
   /etc/init.d/ilogtaild start >/dev/null 2>&1 || 

 ! is_loong_running; 
    >&2
   1



  -p /etc/ilogtail
  -p /etc/ilogtail/users
 [ ! -f /etc/ilogtail/user_defined_id ]; 
    /etc/ilogtail/user_defined_id

RAND8=
USER_DEFINED_ID_PREFIX=
EXISTING_USER_DEFINED_ID=
 [ -n  ]; 
  USER_DEFINED_ID=

  USER_DEFINED_ID=
    |   -a /etc/ilogtail/user_defined_id >/dev/null

 !  grep -Fxq  /etc/ilogtail/user_defined_id 2>/dev/null; 
    >&2
   1

 [ ! -f  ]; 
    

 [ ! -f  ]; 
    >&2
   1


 ! aliyun sls GetMachineGroup --project  --machineGroup  >/dev/null 2>&1; 
   > /tmp/openclaw-machine-group.json <<
  aliyun sls CreateMachineGroup \
    --project  \
    --body 

 ! aliyun sls GetMachineGroup --project  --machineGroup  >/dev/null 2>&1; 
    >&2
   1



 ! aliyun sls GetLogStore --project  --logstore  >/dev/null 2>&1; 
  aliyun sls CreateLogStore --project  \
    --body 


 ! aliyun sls GetIndex --project  --logstore  >/dev/null 2>&1; 
  
  aliyun sls CreateIndex \
    --project  \
    --logstore  \
    --body 


sed  references/dashboard-audit.json > /tmp/openclaw-audit-dashboard.json
sed  references/dashboard-gateway.json > /tmp/openclaw-gateway-dashboard.json


 aliyun sls GET  --project  >/dev/null 2>&1; 
  aliyun sls PUT  \
    --project  \
    --body 

  aliyun sls POST  \
    --project  \
    --body 


 aliyun sls GET  --project  >/dev/null 2>&1; 
  aliyun sls PUT  \
    --project  \
    --body 

  aliyun sls POST  \
    --project  \
    --body 




sed \
  -e  \
  -e  \
  -e  \
  references/collector-config.json > /tmp/openclaw-collector-config.json

 aliyun sls GetConfig --project  --configName  >/dev/null 2>&1; 
  aliyun sls UpdateConfig \
    --project  \
    --configName  \
    --body 

  aliyun sls CreateConfig \
    --project  \
    --body 



aliyun sls ApplyConfigToMachineGroup \
  --project  \
  --machineGroup  \
  --configName 

 

---

Response Format

When this skill completes, return a concise status report with:

1. Inputs used: PROJECT, LOGSTORE, resolved REGION_ID
2. Created/updated resources (machine group, index, dashboards, config, binding)
3. Any skipped steps (already existed / already running)
4. Next verification commands for the user

---

Verification Commands

aliyun sls GetMachineGroup --project "$PROJECT" --machineGroup openclaw-sls-collector
aliyun sls GetIndex --project "$PROJECT" --logstore "$LOGSTORE"
aliyun sls GetDashboard --project "$PROJECT" --dashboardName openclaw-audit
aliyun sls GetDashboard --project "$PROJECT" --dashboardName openclaw-gateway
aliyun sls GetConfig --project "$PROJECT" --configName "openclaw-audit_${LOGSTORE}"

---

Reference Files

• Command flow: references/cli-commands.md
• Index definition: references/index.json
• Dashboard templates: references/dashboard-audit.json, references/dashboard-gateway.json
• Collection config template: references/collector-config.json

Read reference files only when needed:

• Use cli-commands.md for step-by-step troubleshooting.
• Use JSON templates when creating/updating resources.