CloudWatch configuration - AMS Accelerate Operations Plan

CloudWatch configuration

Additional detail on the CloudWatch configuration.

  • CloudWatch configuration file location on the instance:

    • Windows: %ProgramData%\Amazon\AmazonCloudWatchAgent\amazon-cloudwatch-agent.json

    • Linux: /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.d/ams-accelerate-config.json

  • CloudWatch configuration file location in Amazon S3:

    • Windows: https://ams-configuration-artifacts-<region-name>.s3-<region-name>.amazonaws.com/configurations/cloudwatch/latest/windows-cloudwatch-config.json

    • Linux: https://ams-configuration-artifacts-<region-name>.s3-<region-name>.amazonaws.com/configurations/cloudwatch/latest/linux-cloudwatch-config.json

  • Metrics collected:

    • Windows:

      • Amazon SSM Agent (CPU_Usage)

      • CloudWatch Agent (CPU_Usage)

      • Disk space utilization for all disks (% free space)

      • Memory (% committed bytes in use)

    • Linux:

      • Amazon SSM Agent (CPU_Usage)

      • CloudWatch Agent (CPU_Usage)

      • CPU (cpu_usage_idle, cpu_usage_iowait, cpu_usage_user, cpu_usage_system)

      • Disk (used_percent, inodes_used, inodes_total)

      • Diskio (io_time, write_bytes, read_bytes, writes, reads)

      • Mem (mem_used_percent)

      • Swap (swap_used_percent)

  • Logs collected:

    • Windows:

      • AmazonSSMAgentLog

      • AmazonCloudWatchAgentLog

      • AmazonSSMErrorLog

      • AmazonCloudFormationLog

      • ApplicationEventLog

      • EC2ConfigServiceEventLog

      • MicrosoftWindowsAppLockerEXEAndDLLEventLog

      • MicrosoftWindowsAppLockerMSIAndScriptEventLog

      • MicrosoftWindowsGroupPolicyOperationalEventLog

      • SecurityEventLog

      • SystemEventLog

    • Linux:

      • /var/log/amazon/ssm/amazon-ssm-agent.log

      • /var/log/amazon/ssm/errors.log

      • /var/log/audit/audit.log

      • /var/log/cloud-init-output.log

      • /var/log/cloud-init.log

      • /var/log/cron

      • /var/log/maillog

      • /var/log/messages

      • /var/log/secure

      • /var/log/spooler

      • /var/log/yum.log

      • /var/log/zypper.log