AWS fields

edit

aws module collects AWS monitoring metrics from AWS Cloudwatch.

cloud.account.name

The cloud account name or alias used to identify different entities in a multi-tenant environment.

type: keyword

aws

edit
aws.tags.*

Tag key value pairs from aws resources.

type: object

aws.s3.bucket.name

Name of a S3 bucket.

type: keyword

aws.dimensions.*

Metric dimensions.

type: object

aws.*.metrics.*.*

Metrics that returned from Cloudwatch API query.

type: object

billing

edit

billing contains the estimated charges for your AWS account in Cloudwatch.

cloudwatch

edit

cloudwatch contains the metrics that were scraped from AWS CloudWatch which contains monitoring metrics sent by different namespaces.

aws.cloudwatch.namespace

The namespace specified when query cloudwatch api.

type: keyword

dynamodb

edit

dynamodb contains the metrics that were scraped from AWS CloudWatch which contains monitoring metrics sent by AWS DynamoDB.

aws.dynamodb.metrics.SuccessfulRequestLatency.avg

The average latency of successful requests to DynamoDB or Amazon DynamoDB Streams during the specified time period.

type: double

aws.dynamodb.metrics.SuccessfulRequestLatency.max

The maximum latency of successful requests to DynamoDB or Amazon DynamoDB Streams during the specified time period.

type: double

aws.dynamodb.metrics.OnlineIndexPercentageProgress.avg

The percentage of completion when a new global secondary index is being added to a table.

type: double

aws.dynamodb.metrics.ProvisionedWriteCapacityUnits.avg

The number of provisioned write capacity units for a table or a global secondary index.

type: double

aws.dynamodb.metrics.ProvisionedReadCapacityUnits.avg

The number of provisioned read capacity units for a table or a global secondary index.

type: double

aws.dynamodb.metrics.ConsumedReadCapacityUnits.avg

The average number of read capacity units consumed over the specified time period, so you can track how much of your provisioned throughput is used.

type: double

aws.dynamodb.metrics.ConsumedReadCapacityUnits.sum

The sum of read capacity units consumed over the specified time period, so you can track how much of your provisioned throughput is used.

type: long

aws.dynamodb.metrics.ConsumedWriteCapacityUnits.avg

The average number of write capacity units consumed over the specified time period, so you can track how much of your provisioned throughput is used.

type: double

aws.dynamodb.metrics.ConsumedWriteCapacityUnits.sum

The sum of write capacity units consumed over the specified time period, so you can track how much of your provisioned throughput is used.

type: long

aws.dynamodb.metrics.ReplicationLatency.avg

The average elapsed time between an updated item appearing in the DynamoDB stream for one replica table, and that item appearing in another replica in the global table.

type: double

aws.dynamodb.metrics.ReplicationLatency.max

The maximum elapsed time between an updated item appearing in the DynamoDB stream for one replica table, and that item appearing in another replica in the global table.

type: double

aws.dynamodb.metrics.TransactionConflict.avg

Average rejected item-level requests due to transactional conflicts between concurrent requests on the same items.

type: double

aws.dynamodb.metrics.TransactionConflict.sum

Total rejected item-level requests due to transactional conflicts between concurrent requests on the same items.

type: long

aws.dynamodb.metrics.AccountProvisionedReadCapacityUtilization.avg

The average percentage of provisioned read capacity units utilized by the account.

type: double

aws.dynamodb.metrics.AccountProvisionedWriteCapacityUtilization.avg

The average percentage of provisioned write capacity units utilized by the account.

type: double

aws.dynamodb.metrics.SystemErrors.sum

The requests to DynamoDB or Amazon DynamoDB Streams that generate an HTTP 500 status code during the specified time period.

type: long

aws.dynamodb.metrics.ConditionalCheckFailedRequests.sum

The number of failed attempts to perform conditional writes.

type: long

aws.dynamodb.metrics.PendingReplicationCount.sum

The number of item updates that are written to one replica table, but that have not yet been written to another replica in the global table.

type: long

aws.dynamodb.metrics.ReadThrottleEvents.sum

Requests to DynamoDB that exceed the provisioned read capacity units for a table or a global secondary index.

type: long

aws.dynamodb.metrics.ThrottledRequests.sum

Requests to DynamoDB that exceed the provisioned throughput limits on a resource (such as a table or an index).

type: long

aws.dynamodb.metrics.WriteThrottleEvents.sum

Requests to DynamoDB that exceed the provisioned write capacity units for a table or a global secondary index.

type: long

aws.dynamodb.metrics.AccountMaxReads.max

The maximum number of read capacity units that can be used by an account. This limit does not apply to on-demand tables or global secondary indexes.

type: long

aws.dynamodb.metrics.AccountMaxTableLevelReads.max

The maximum number of read capacity units that can be used by a table or global secondary index of an account. For on-demand tables this limit caps the maximum read request units a table or a global secondary index can use.

type: long

aws.dynamodb.metrics.AccountMaxTableLevelWrites.max

The maximum number of write capacity units that can be used by a table or global secondary index of an account. For on-demand tables this limit caps the maximum write request units a table or a global secondary index can use.

type: long

aws.dynamodb.metrics.AccountMaxWrites.max

The maximum number of write capacity units that can be used by an account. This limit does not apply to on-demand tables or global secondary indexes.

type: long

aws.dynamodb.metrics.MaxProvisionedTableReadCapacityUtilization.max

The percentage of provisioned read capacity units utilized by the highest provisioned read table or global secondary index of an account.

type: double

aws.dynamodb.metrics.MaxProvisionedTableWriteCapacityUtilization.max

The percentage of provisioned write capacity utilized by the highest provisioned write table or global secondary index of an account.

type: double

ebs

edit

ebs contains the metrics that were scraped from AWS CloudWatch which contains monitoring metrics sent by AWS EBS.

ec2

edit

ec2 contains the metrics that were scraped from AWS CloudWatch which contains monitoring metrics sent by AWS EC2.

aws.ec2.cpu.total.pct

The percentage of allocated EC2 compute units that are currently in use on the instance.

type: scaled_float

aws.ec2.cpu.credit_usage

The number of CPU credits spent by the instance for CPU utilization.

type: long

aws.ec2.cpu.credit_balance

The number of earned CPU credits that an instance has accrued since it was launched or started.

type: long

aws.ec2.cpu.surplus_credit_balance

The number of surplus credits that have been spent by an unlimited instance when its CPUCreditBalance value is zero.

type: long

aws.ec2.cpu.surplus_credits_charged

The number of spent surplus credits that are not paid down by earned CPU credits, and which thus incur an additional charge.

type: long

aws.ec2.network.in.packets

The number of packets received on all network interfaces by the instance.

type: long

aws.ec2.network.in.packets_per_sec

The number of packets per second sent out on all network interfaces by the instance.

type: long

aws.ec2.network.out.packets

The number of packets sent out on all network interfaces by the instance.

type: long

aws.ec2.network.out.packets_per_sec

The number of packets per second sent out on all network interfaces by the instance.

type: long

aws.ec2.network.in.bytes

The number of bytes received on all network interfaces by the instance.

type: long

format: bytes

aws.ec2.network.in.bytes_per_sec

The number of bytes per second received on all network interfaces by the instance.

type: long

aws.ec2.network.out.bytes

The number of bytes sent out on all network interfaces by the instance.

type: long

format: bytes

aws.ec2.network.out.bytes_per_sec

The number of bytes per second sent out on all network interfaces by the instance.

type: long

aws.ec2.diskio.read.bytes

Bytes read from all instance store volumes available to the instance.

type: long

format: bytes

aws.ec2.diskio.read.bytes_per_sec

Bytes read per second from all instance store volumes available to the instance.

type: long

aws.ec2.diskio.write.bytes

Bytes written to all instance store volumes available to the instance.

type: long

format: bytes

aws.ec2.diskio.write.bytes_per_sec

Bytes written per second to all instance store volumes available to the instance.

type: long

aws.ec2.diskio.read.ops

Completed read operations from all instance store volumes available to the instance in a specified period of time.

type: long

aws.ec2.diskio.read.ops_per_sec

Completed read operations per second from all instance store volumes available to the instance in a specified period of time.

type: long

aws.ec2.diskio.write.ops

Completed write operations to all instance store volumes available to the instance in a specified period of time.

type: long

aws.ec2.diskio.write.ops_per_sec

Completed write operations per second to all instance store volumes available to the instance in a specified period of time.

type: long

aws.ec2.status.check_failed

Reports whether the instance has passed both the instance status check and the system status check in the last minute.

type: long

aws.ec2.status.check_failed_system

Reports whether the instance has passed the system status check in the last minute.

type: long

aws.ec2.status.check_failed_instance

Reports whether the instance has passed the instance status check in the last minute.

type: long

aws.ec2.instance.core.count

The number of CPU cores for the instance.

type: integer

aws.ec2.instance.image.id

The ID of the image used to launch the instance.

type: keyword

aws.ec2.instance.monitoring.state

Indicates whether detailed monitoring is enabled.

type: keyword

aws.ec2.instance.private.dns_name

The private DNS name of the network interface.

type: keyword

aws.ec2.instance.private.ip

The private IPv4 address associated with the network interface.

type: ip

aws.ec2.instance.public.dns_name

The public DNS name of the instance.

type: keyword

aws.ec2.instance.public.ip

The address of the Elastic IP address (IPv4) bound to the network interface.

type: ip

aws.ec2.instance.state.code

The state of the instance, as a 16-bit unsigned integer.

type: integer

aws.ec2.instance.state.name

The state of the instance (pending | running | shutting-down | terminated | stopping | stopped).

type: keyword

aws.ec2.instance.threads_per_core

The number of threads per CPU core.

type: integer

elb

edit

elb contains the metrics that were scraped from AWS CloudWatch which contains monitoring metrics sent by AWS ELB.

lambda

edit

lambda contains the metrics that were scraped from AWS CloudWatch which contains monitoring metrics sent by AWS Lambda.

natgateway

edit

natgateway contains the metrics from Cloudwatch to track usage of NAT gateway related resources.

rds

edit

rds contains the metrics that were scraped from AWS CloudWatch which contains monitoring metrics sent by AWS RDS.

aws.rds.cpu.total.pct

The percentage of CPU utilization.

type: scaled_float

format: percent

aws.rds.cpu.credit_usage

The number of CPU credits spent by the instance for CPU utilization.

type: long

aws.rds.cpu.credit_balance

The number of earned CPU credits that an instance has accrued since it was launched or started.

type: long

aws.rds.database_connections

The number of database connections in use.

type: long

aws.rds.db_instance.arn

Amazon Resource Name(ARN) for each rds.

type: keyword

aws.rds.db_instance.class

Contains the name of the compute and memory capacity class of the DB instance.

type: keyword

aws.rds.db_instance.identifier

Contains a user-supplied database identifier. This identifier is the unique key that identifies a DB instance.

type: keyword

aws.rds.db_instance.status

Specifies the current state of this database.

type: keyword

aws.rds.disk_queue_depth

The number of outstanding IOs (read/write requests) waiting to access the disk.

type: float

aws.rds.failed_sql_server_agent_jobs

The number of failed SQL Server Agent jobs during the last minute.

type: long

aws.rds.freeable_memory.bytes

The amount of available random access memory.

type: long

format: bytes

aws.rds.free_storage.bytes

The amount of available storage space.

type: long

format: bytes

aws.rds.maximum_used_transaction_ids

The maximum transaction ID that has been used. Applies to PostgreSQL.

type: long

aws.rds.oldest_replication_slot_lag.mb

The lagging size of the replica lagging the most in terms of WAL data received. Applies to PostgreSQL.

type: long

aws.rds.read_io.ops_per_sec

The average number of disk read I/O operations per second.

type: float

aws.rds.replica_lag.sec

The amount of time a Read Replica DB instance lags behind the source DB instance. Applies to MySQL, MariaDB, and PostgreSQL Read Replicas.

type: long

format: duration

aws.rds.swap_usage.bytes

The amount of swap space used on the DB instance. This metric is not available for SQL Server.

type: long

format: bytes

aws.rds.transaction_logs_generation

The disk space used by transaction logs. Applies to PostgreSQL.

type: long

aws.rds.write_io.ops_per_sec

The average number of disk write I/O operations per second.

type: float

aws.rds.queries

The average number of queries executed per second.

type: long

aws.rds.deadlocks

The average number of deadlocks in the database per second.

type: long

aws.rds.volume_used.bytes

The amount of storage used by your Aurora DB instance, in bytes.

type: long

format: bytes

aws.rds.volume.read.iops

The number of billed read I/O operations from a cluster volume, reported at 5-minute intervals.

type: long

format: bytes

aws.rds.volume.write.iops

The number of write disk I/O operations to the cluster volume, reported at 5-minute intervals.

type: long

format: bytes

aws.rds.free_local_storage.bytes

The amount of storage available for temporary tables and logs, in bytes.

type: long

format: bytes

aws.rds.login_failures

The average number of failed login attempts per second.

type: long

aws.rds.throughput.commit

The average number of commit operations per second.

type: float

aws.rds.throughput.delete

The average number of delete queries per second.

type: float

aws.rds.throughput.ddl

The average number of DDL requests per second.

type: float

aws.rds.throughput.dml

The average number of inserts, updates, and deletes per second.

type: float

aws.rds.throughput.insert

The average number of insert queries per second.

type: float

aws.rds.throughput.network

The amount of network throughput both received from and transmitted to clients by each instance in the Aurora MySQL DB cluster, in bytes per second.

type: float

aws.rds.throughput.network_receive

The incoming (Receive) network traffic on the DB instance, including both customer database traffic and Amazon RDS traffic used for monitoring and replication.

type: float

aws.rds.throughput.network_transmit

The outgoing (Transmit) network traffic on the DB instance, including both customer database traffic and Amazon RDS traffic used for monitoring and replication.

type: float

aws.rds.throughput.read

The average amount of time taken per disk I/O operation.

type: float

aws.rds.throughput.select

The average number of select queries per second.

type: float

aws.rds.throughput.update

The average number of update queries per second.

type: float

aws.rds.throughput.write

The average number of bytes written to disk per second.

type: float

aws.rds.latency.commit

The amount of latency for commit operations, in milliseconds.

type: float

format: duration

aws.rds.latency.ddl

The amount of latency for data definition language (DDL) requests, in milliseconds.

type: float

format: duration

aws.rds.latency.dml

The amount of latency for inserts, updates, and deletes, in milliseconds.

type: float

format: duration

aws.rds.latency.insert

The amount of latency for insert queries, in milliseconds.

type: float

format: duration

aws.rds.latency.read

The average amount of time taken per disk I/O operation.

type: float

format: duration

aws.rds.latency.select

The amount of latency for select queries, in milliseconds.

type: float

format: duration

aws.rds.latency.update

The amount of latency for update queries, in milliseconds.

type: float

format: duration

aws.rds.latency.write

The average amount of time taken per disk I/O operation.

type: float

format: duration

aws.rds.latency.delete

The amount of latency for delete queries, in milliseconds.

type: float

format: duration

aws.rds.disk_usage.bin_log.bytes

The amount of disk space occupied by binary logs on the master. Applies to MySQL read replicas.

type: long

format: bytes

aws.rds.disk_usage.replication_slot.mb

The disk space used by replication slot files. Applies to PostgreSQL.

type: long

aws.rds.disk_usage.transaction_logs.mb

The disk space used by transaction logs. Applies to PostgreSQL.

type: long

aws.rds.transactions.active

The average number of current transactions executing on an Aurora database instance per second.

type: long

aws.rds.transactions.blocked

The average number of transactions in the database that are blocked per second.

type: long

aws.rds.db_instance.db_cluster_identifier

This identifier is the unique key that identifies a DB cluster specifically for Amazon Aurora DB cluster.

type: keyword

aws.rds.db_instance.role

DB roles like WRITER or READER, specifically for Amazon Aurora DB cluster.

type: keyword

aws.rds.db_instance.engine_name

Each DB instance runs a DB engine, like MySQL, MariaDB, PostgreSQL and etc.

type: keyword

aws.rds.aurora_bin_log_replica_lag

The amount of time a replica DB cluster running on Aurora with MySQL compatibility lags behind the source DB cluster.

type: long

aws.rds.aurora_global_db.replicated_write_io.bytes

In an Aurora Global Database, the number of write I/O operations replicated from the primary AWS Region to the cluster volume in a secondary AWS Region.

type: long

aws.rds.aurora_global_db.data_transfer.bytes

In an Aurora Global Database, the amount of redo log data transferred from the master AWS Region to a secondary AWS Region.

type: long

aws.rds.aurora_global_db.replication_lag.ms

For an Aurora Global Database, the amount of lag when replicating updates from the primary AWS Region, in milliseconds.

type: long

aws.rds.aurora_replica.lag.ms

For an Aurora Replica, the amount of lag when replicating updates from the primary instance, in milliseconds.

type: long

aws.rds.aurora_replica.lag_max.ms

The maximum amount of lag between the primary instance and each Aurora DB instance in the DB cluster, in milliseconds.

type: long

aws.rds.aurora_replica.lag_min.ms

The minimum amount of lag between the primary instance and each Aurora DB instance in the DB cluster, in milliseconds.

type: long

aws.rds.backtrack_change_records.creation_rate

The number of backtrack change records created over five minutes for your DB cluster.

type: long

aws.rds.backtrack_change_records.stored

The actual number of backtrack change records used by your DB cluster.

type: long

aws.rds.backtrack_window.actual

The difference between the target backtrack window and the actual backtrack window.

type: long

aws.rds.backtrack_window.alert

The number of times that the actual backtrack window is smaller than the target backtrack window for a given period of time.

type: long

aws.rds.storage_used.backup_retention_period.bytes

The total amount of backup storage in bytes used to support the point-in-time restore feature within the Aurora DB cluster’s backup retention window.

type: long

aws.rds.storage_used.snapshot.bytes

The total amount of backup storage in bytes consumed by all Aurora snapshots for an Aurora DB cluster outside its backup retention window.

type: long

aws.rds.cache_hit_ratio.buffer

The percentage of requests that are served by the buffer cache.

type: long

aws.rds.cache_hit_ratio.result_set

The percentage of requests that are served by the Resultset cache.

type: long

aws.rds.engine_uptime.sec

The amount of time that the instance has been running, in seconds.

type: long

aws.rds.rds_to_aurora_postgresql_replica_lag.sec

The amount of lag in seconds when replicating updates from the primary RDS PostgreSQL instance to other nodes in the cluster.

type: long

aws.rds.backup_storage_billed_total.bytes

The total amount of backup storage in bytes for which you are billed for a given Aurora DB cluster.

type: long

aws.rds.aurora_volume_left_total.bytes

The remaining available space for the cluster volume, measured in bytes.

type: long

s3_daily_storage

edit

s3_daily_storage contains the daily storage metrics that were scraped from AWS CloudWatch which contains monitoring metrics sent by AWS S3.

aws.s3_daily_storage.bucket.size.bytes

The amount of data in bytes stored in a bucket.

type: long

format: bytes

aws.s3_daily_storage.number_of_objects

The total number of objects stored in a bucket for all storage classes.

type: long

s3_request

edit

s3_request contains request metrics that were scraped from AWS CloudWatch which contains monitoring metrics sent by AWS S3.

aws.s3_request.requests.total

The total number of HTTP requests made to an Amazon S3 bucket, regardless of type.

type: long

aws.s3_request.requests.get

The number of HTTP GET requests made for objects in an Amazon S3 bucket.

type: long

aws.s3_request.requests.put

The number of HTTP PUT requests made for objects in an Amazon S3 bucket.

type: long

aws.s3_request.requests.delete

The number of HTTP DELETE requests made for objects in an Amazon S3 bucket.

type: long

aws.s3_request.requests.head

The number of HTTP HEAD requests made to an Amazon S3 bucket.

type: long

aws.s3_request.requests.post

The number of HTTP POST requests made to an Amazon S3 bucket.

type: long

aws.s3_request.requests.select

The number of Amazon S3 SELECT Object Content requests made for objects in an Amazon S3 bucket.

type: long

aws.s3_request.requests.select_scanned.bytes

The number of bytes of data scanned with Amazon S3 SELECT Object Content requests in an Amazon S3 bucket.

type: long

format: bytes

aws.s3_request.requests.select_returned.bytes

The number of bytes of data returned with Amazon S3 SELECT Object Content requests in an Amazon S3 bucket.

type: long

format: bytes

aws.s3_request.requests.list

The number of HTTP requests that list the contents of a bucket.

type: long

aws.s3_request.downloaded.bytes

The number bytes downloaded for requests made to an Amazon S3 bucket, where the response includes a body.

type: long

format: bytes

aws.s3_request.uploaded.bytes

The number bytes uploaded that contain a request body, made to an Amazon S3 bucket.

type: long

format: bytes

aws.s3_request.errors.4xx

The number of HTTP 4xx client error status code requests made to an Amazon S3 bucket with a value of either 0 or 1.

type: long

aws.s3_request.errors.5xx

The number of HTTP 5xx server error status code requests made to an Amazon S3 bucket with a value of either 0 or 1.

type: long

aws.s3_request.latency.first_byte.ms

The per-request time from the complete request being received by an Amazon S3 bucket to when the response starts to be returned.

type: long

format: duration

aws.s3_request.latency.total_request.ms

The elapsed per-request time from the first byte received to the last byte sent to an Amazon S3 bucket.

type: long

format: duration

sns

edit

sns contains the metrics that were scraped from AWS CloudWatch which contains monitoring metrics sent by AWS SNS.

sqs

edit

sqs contains the metrics that were scraped from AWS CloudWatch which contains monitoring metrics sent by AWS SQS.

aws.sqs.oldest_message_age.sec

The approximate age of the oldest non-deleted message in the queue.

type: long

format: duration

aws.sqs.messages.delayed

TThe number of messages in the queue that are delayed and not available for reading immediately.

type: long

aws.sqs.messages.not_visible

The number of messages that are in flight.

type: long

aws.sqs.messages.visible

The number of messages available for retrieval from the queue.

type: long

aws.sqs.messages.deleted

The number of messages deleted from the queue.

type: long

aws.sqs.messages.received

The number of messages returned by calls to the ReceiveMessage action.

type: long

aws.sqs.messages.sent

The number of messages added to a queue.

type: long

aws.sqs.empty_receives

The number of ReceiveMessage API calls that did not return a message.

type: long

aws.sqs.sent_message_size.bytes

The size of messages added to a queue.

type: long

format: bytes

aws.sqs.queue.name

SQS queue name

type: keyword

transitgateway

edit

transitgateway contains the metrics from Cloudwatch to track usage of transit gateway related resources.

usage

edit

usage contains the metrics from Cloudwatch to track usage of some AWS resources.

vpn

edit

vpn contains the metrics from Cloudwatch to track usage of VPN related resources.