All Apps and Add-ons

What is the correct stanza configuration to set up the input for amazon cloudwatch?

jmallorquin
Builder

Hi,

I'm using this stanza for setting up amazon cloudwatch.
I can't see errors in the configuration, but I'm not getting any data from amazon. Can anybody tell me if I'm using the correct configuration of metric_dimensions because i have tried many forms but none have helped me get data from amazon.
thanks,

[aws_cloudwatch://es00-ec2]
aws_account = aws-es00
aws_region = eu-west-1
host = aws-op
metric_dimensions = [{"Name": "InstanceId","Value": "i-264d4964"}]
metric_names = ["CPUUtilization"]
metric_namespace = AWS/EC2
period = 300
polling_interval = 300
sourcetype = aws:cloudwatch
statistics = ["Maximum"]
1 Solution

jmallorquin
Builder

Hi all,

Finally it works with this stanza...

[aws_cloudwatch://xxxxxxxxxxxxxxxxxx]
aws_account = xxxxxxxxxxxxxxx
aws_region = xxxxxxxxxx
host = xxxxxxxxxxxxxxxxxx
metric_dimensions = [{"LoadBalancerName":["xxxxxxxxxxxxxxxxxxxxxxxxxx"]},{"AvailabilityZone":["eu-we
st-1c"]},{"LoadBalancerName":["xxxxxxxxxxxxxxxxxxxxxxxx"]},{"AvailabilityZone":["eu-west-1a"]}]
metric_names = ["Latency","BackendConnectionErrors","SurgeQueueLength","RequestCount","HealthyHostCount","
UnHealthyHostCount","HTTPCode_Backend_4XX","HTTPCode_Backend_2XX","HTTPCode_Backend_3XX"]
metric_namespace = AWS/ELB
period = 300
polling_interval = 600
sourcetype = aws:cloudwatch
statistics = ["Average","Maximum","Minimum"]

View solution in original post

jmallorquin
Builder

Hi all,

Finally it works with this stanza...

[aws_cloudwatch://xxxxxxxxxxxxxxxxxx]
aws_account = xxxxxxxxxxxxxxx
aws_region = xxxxxxxxxx
host = xxxxxxxxxxxxxxxxxx
metric_dimensions = [{"LoadBalancerName":["xxxxxxxxxxxxxxxxxxxxxxxxxx"]},{"AvailabilityZone":["eu-we
st-1c"]},{"LoadBalancerName":["xxxxxxxxxxxxxxxxxxxxxxxx"]},{"AvailabilityZone":["eu-west-1a"]}]
metric_names = ["Latency","BackendConnectionErrors","SurgeQueueLength","RequestCount","HealthyHostCount","
UnHealthyHostCount","HTTPCode_Backend_4XX","HTTPCode_Backend_2XX","HTTPCode_Backend_3XX"]
metric_namespace = AWS/ELB
period = 300
polling_interval = 600
sourcetype = aws:cloudwatch
statistics = ["Average","Maximum","Minimum"]
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...