- A Cloud Guru
Configure an Alert Based on Logging Content
In this lab, we'll walk through the process to filter over existing logging data inside of CloudWatch Logs. We'll start by creating a SNS topic without a subscription, then filter our CloudWatch Logs data to create a metric filter. After creating a metric filter and defining our metric, we will configure an alarm to send notifications to our created SNS topic.
Table of Contents
Create an SNS Topic Named ErrorTopic without a Subscription
Navigate to to the SNS dashboard and create a SNS topic named
Do not enable a subscription for this SNS topic.
Create a Metric Filter on the TrackMyErrors CloudWatch Logs Log Group Filtering for StatusCode 500
Navigate to the CloudWatch Logs dashboard and create a metric filter on the TrackMyErrors CloudWatch Logs Log Group.
Create a metric filter named
StatusCode500using the following filter:
[host, logName, user, timestamp, request, statusCode=5*, size].
Note: Use this exact filter for grading purposes.
Create a metric based on this filter; name your metric and namespace
StatusCode500. Set the
Create an Alarm Based on the Metric You Created
Navigate to the
StatusCode500metric (in CloudWatch's All metrics view) and wait a short period for data to populate in the metric dashboard.
After you see data plotted for the metric, create an alarm for the metric. Name the alarm
Set the alarm statistic to Sum and the period to 1 minute. Configure the threshold to trigger whenever there are more than four events in the 1-minute period.
Configure the alarm action to send notifications when it is In Alarm to the SNS topic you created.
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.