AWS CloudWatch

-


1. )Amazon Cloud Watch - is monitoring service to monitor your AWS resources, as well as the application that you run on AWS.



CloudWatch can monitor things like:

a) Compute

-Autoscaling Groups
-Elastic Load Balancers
-Route53 Health Checks

b) Storage & Content Delivery

-EBS Volumes
-Storage Gateways
-CloudFront

c) Databases & Analytics

-DynamoDB
-Elasticache Nodes
-RDS Instances
-Elastic MapReduce Job Flows
-Redshift

d) Other

-SNS Topics
-SQS Queues
-Opsworks
-CloudWatch Logs
-Estimated Charges on your AWS Bill




Host Level Metrics Consist of:
-CPU
  *CPUUtilization
-Network
 *NetworkIn
 *NetworkOut
 *NetworkPacketsIn
 *NetworkPacketsOut
-Disk
 *DiskReadOps
 *DiskWriteOps
 *DiskReadBytes
 *DiskWriteBytes
-Status Check
 *StatusCheckFailed
 *StatusCheckFailed_Instance
 *StatusCheckFailed_System


Tip:
-RAM Utilization is a custom metric.
-By default EC2 monitoring is 5 min intervals, unless you enable detailed monitoring which will then make it 1 min intervals.

https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ec2-metricscollected.html



How Long are CloudWatch Metrics Stored?

You can retrieve data using the GetMetricStatistics API or by using third party tools offered by AWS partners.

1 min datapoints are available for 15 days
5 min datapoints are available for 63 days
1 h datapoints are available for 455 days

You can retrieve data from any terminated EC2 or ELB instance after its termination.


Metric Granularity

It depends on the AWS service. Many default metrics for many default services are 1 min, but it can be 3 or 5 min depending on the service.

Tip: Exam custom metrics the minimum granularity that you can have is 1 min.



CloudWatch Alarms

You can create an alarm to monitor any Amazon CloudWatch metric in your account. This can include EC2 CPU Utilization, Elastic Load Balancer Latency or even the charges on your AWS bill. You can set the appropriate thresholds in which to trigger the alarms and also set what actions should be taken if any alarm state is reached. This will be covered in a subsequent lecture.



Labs:

a) Monitoring Memory and Disk Metrics for Amazon EC2 Linux Instances:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/mon-scripts.html
 -> how to put RAM logs from EC2 to CloudWatch



CloudWatch Dashborad

 CloudWatch Logs

 Cloud Watch Logs with ElasticSearch
"start striming vpc flow logs to elasticsearch"
it is using AWS Lambda

Metrics Filters






Komentarze

Prześlij komentarz

Popularne posty z tego bloga

Kubernetes

-
Obraz
I. Introduction 1. Kubernetes Overview - Kubernetes = popular container orchestrator  * it lets you schedule containers on a cluster of machines  * you can run multiple containers on one machine  * you can run long running services (like web applications)  * Kubernetes will manage the state of those containers:    ** Can start the container on specific nodeskubectl create -f pod-demo.yml    ** Will restart a container when it gets killed    ** Can move containers from one dnode to another node - you can run Kubernetes anywhere:   *on-premise (own datacenter)   *public (Google cloud, AWS)   *hybrid: public & private -highly modular -open source -backed by google -Container Orchestration = Make many servers act like one -Released by Google in 2015, maintained by large community -Runs on top of Docker (usually) as a set of APIs in containers -Provides API/CLI to managed containers across server...
Czytaj więcej

Helm

-
 0. Overivew - Packet manager 1. Helm Provenance and Integrity - https://github.com/technosophos/k8s-helm/blob/master/docs/provenance.md - Helm has provenance tools which help chart users verify the integrity and origin of a package. Using industry-standard tools based on PKI, GnuPG, and well-respected package managers, Helm can generate and verify signature files. a) Overview   -  I ntegrity is established by comparing a chart to a provenance record. Provenance records are stored in   provenance files , which are stored alongside a packaged chart. For example, if a chart is named   myapp-1.2.3.tgz , its provenance file will be   myapp-1.2.3.tgz.prov .  -  Provenance files are generated at packaging time ( helm package --sign ... ), and can be checked by multiple commands, notable   helm install --verify . b) The workflow This section describes a potential workflow for using provenance data effectively. Prerequisites: A valid PGP keyp...
Czytaj więcej

Ansible Tower / AWX

-
- Ansible Tower provides a web server interface to ansible.  - System rewuierments are somewhat heavy.  - Tower is only free for minimal use. Working with more than a few system requires a paid lincense.  - The two keys benefots of Ansible Tower are user permissioning and the audit trail (only provided with license.  - Only touched on in EX4077  - How is ansible Tower installed on your system? Ansible Tower is provided in a tarball containing binaries, config files, and an installation script that must be ran.  - To populate an Ansible Tower project with source files can be used:        * file system of the Ansible Tower server        * git        * subversion  - features:        * an interface for running Ansible plays and playbooks against target hosts.       * Separate user accounts permissioned for selective access to Tower-managed ...
Czytaj więcej