logstash-plugins/logstash-input-cloudwatch

Name: logstash-input-cloudwatch

Owner: Logstash Plugins

Description: A Logstash input to pull events from the Amazon Web Services CloudWatch API

Created: 2016-01-25 01:12:06.0

Updated: 2018-05-03 05:08:01.0

Pushed: 2018-05-05 14:57:25.0

Homepage: null

Size: 53

Language: Ruby

GitHub Committers

User	Most Recent Commit	# Commits

Other Committers

User	Email	Most Recent Commit	# Commits

README

Logstash CloudWatch Input Plugins

Pull events from the Amazon Web Services CloudWatch API.

To use this plugin, you must have an AWS account, and the following policy:

 {
     "Version": "2012-10-17",
     "Statement": [
         {
             "Sid": "Stmt1444715676000",
             "Effect": "Allow",
             "Action": [
                 "cloudwatch:GetMetricStatistics",
                 "cloudwatch:ListMetrics"
             ],
             "Resource": "*"
         },
         {
             "Sid": "Stmt1444716576170",
             "Effect": "Allow",
             "Action": [
                 "ec2:DescribeInstances"
             ],
             "Resource": "*"
         }
     ]
 }

See the IAM section on AWS for more details on setting up AWS identities.

Supported Namespaces

Unfortunately it's not possible to create a “one shoe fits all” solution for fetching metrics from AWS. We need to specifically add support for every namespace. This takes time so we'll be adding support for namespaces as the requests for them come in and we get time to do it. Please check the metric support issues for already requested namespaces, and add your request if it's not there yet.

Configuration

Just note that the below configuration doesn't contain the AWS API access information.

 input {
   cloudwatch {
     namespace => "AWS/EC2"
     metrics => [ "CPUUtilization" ]
     filters => { "tag:Monitoring" => "Yes" }
     region => "us-east-1"
   }
 }

 input {
   cloudwatch {
     namespace => "AWS/EBS"
     metrics => ["VolumeQueueLength"]
     filters => { "tag:Monitoring" => "Yes" }
     region => "us-east-1"
   }
 }

 input {
   cloudwatch {
     namespace => "AWS/RDS"
     metrics => ["CPUUtilization", "CPUCreditUsage"]
     filters => { "EngineName" => "mysql" } # Only supports EngineName, DatabaseClass and DBInstanceIdentifier
     region => "us-east-1"
   }
 }

See AWS Developer Guide for more information on namespaces and metrics.