使用 Amazon 監控 OpenSearch 服務事件 EventBridge - Amazon OpenSearch 服務

本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。

使用 Amazon 監控 OpenSearch 服務事件 EventBridge

Amazon OpenSearch 服務與 Amazon 集成, EventBridge 以通知您某些事件會影響您的域。來自 AWS 服務的事件會以近乎即時 EventBridge 的方式傳送到。同樣的事件也被發送到 Amazon CloudWatch 活動,Amazon EventBridge 的前身。您可編寫簡單的規則,來指示您在意的事件,以及當事件符合規則時所要自動執行的動作。可以自動觸發的動作如下:

  • 調用一 AWS Lambda 個函數

  • 叫用 Amazon EC2 執行命令

  • 將事件轉傳至 Amazon Kinesis Data Streams

  • 激活 AWS Step Functions 狀態機

  • 通知 Amazon SNS 主題或 Amazon SQS 佇列

如需詳細資訊,請參閱 Amazon EventBridge 使用者指南 EventBridge中的開始使用 Amazon

服務軟體更新事件

OpenSearch 服務會在發生下列服務軟體更新事件之一 EventBridge 時傳送事件至。

可用的服務軟體更新

OpenSearch 服務會在服務軟體更新可用時傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Software Update Notification", "source": "aws.es", "account": "123456789012", "time": "2016-11-01T13:12:22Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Service Software Update", "status": "Available", "severity": "Informational", "description": "Service software update R20220928 available. Service Software Deployment Mechanism: Blue/Green. For more information on deployment configuration, please see: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-configuration-changes.html" } }

預約服務軟體更新

OpenSearch 服務會在已排程服務軟體更新時傳送此事件。對於選擇性更新,您會在排程日期收到通知,而且您可以選擇隨時重新排程。針對必要更新,您會在排定日期前三天收到通知,而且您可以選擇在必要時段內重新排程。

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Software Update Notification", "source": "aws.es", "account": "123456789012", "time": "2016-11-01T13:12:22Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Service Software Update", "status": "Scheduled", "severity": "High", "description": "A new service software update [R20200330-p1] has been scheduled at [21st May 2023 12:40 GMT]. Please see documentation for more information on scheduling software updates: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/service-software.html." } }

服務軟體更新已重新安排

OpenSearch 服務會在重新排程選用的服務軟體更新時傳送此事件。如需詳細資訊,請參閱 可選更新與必要更新

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Software Update Notification", "source": "aws.es", "account": "123456789012", "time": "2016-11-01T13:12:22Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Service Software Update", "status": "Rescheduled", "severity": "High", "description": "The service software update [R20200330-p1], which was originally scheduled for [21st May 2023 12:40 GMT], has been rescheduled to [23rd May 2023 12:40 GMT]. Please see documentation for more information on scheduling software updates: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/service-software.html." } }

服務軟體更新已開始

OpenSearch 服務會在服務軟體更新已啟動時傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Software Update Notification", "source": "aws.es", "account": "123456789012", "time": "2016-11-01T13:12:22Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Service Software Update", "status": "Started", "severity": "Informational", "description": "Service software update [R20200330-p1] started. } }

服務軟體更新已完成

OpenSearch 服務會在服務軟體更新完成時傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Software Update Notification", "source": "aws.es", "account": "123456789012", "time": "2016-11-01T13:12:22Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Service Software Update", "status": "Completed", "severity": "Informational", "description": "Service software update [R20200330-p1] completed." } }

服務軟體更新已取消

OpenSearch 服務會在取消服務軟體更新時傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Software Update Notification", "source": "aws.es", "account": "123456789012", "time": "2016-11-01T13:12:22Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Service Software Update", "status": "Cancelled", "severity": "Informational", "description": "The scheduled service software update [R20200330-p1] has been cancelled as a newer update is available. Please schedule the latest update." } }

已取消預約服務軟體更新

OpenSearch 服務會在取消先前針對網域排程的服務軟體更新時傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Software Update Notification", "source": "aws.es", "account": "123456789012", "time": "2016-11-01T13:12:22Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Service Software Update", "status": "Cancelled", "severity": "Informational", "description": "The scheduled service software update [R20200330-p1] has been cancelled." } }

服務軟體更新未執行

OpenSearch 服務會在無法起始服務軟體更新時傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Software Update Notification", "source": "aws.es", "account": "123456789012", "time": "2016-11-01T13:12:22Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Service Software Update", "status": "Unexecuted", "severity": "Informational", "description": "The scheduled service software update [R20200330-p1] cannot be started. Reason: [reason]" } }

服務軟體更新已失敗

OpenSearch 服務會在服務軟體更新失敗時傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Software Update Notification", "source": "aws.es", "account": "123456789012", "time": "2016-11-01T13:12:22Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Service Software Update", "status": "Failed", "severity": "High", "description": "Installation of service software update [R20200330-p1] failed. [reason]. } }

需要服務軟體更新

OpenSearch 服務會在需要服務軟體更新時傳送此事件。如需詳細資訊,請參閱 可選更新與必要更新

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Software Update Notification", "source": "aws.es", "account": "123456789012", "time": "2016-11-01T13:12:22Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Service Software Update", "status": "Required", "severity": "High", "description": "Service software update [R20200330-p1] available. Update will be automatically installed after [21st May 2023] if no action is taken. Service Software Deployment Mechanism: Blue/Green. For more information on deployment configuration, please see: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-configuration-changes.html" } }

自動調整事件

OpenSearch 當發生下列自動調整事件之一 EventBridge 時,Service 會傳送事件至。

自動調整待定

OpenSearch 「自動調整」已識別改善叢集效能和可用性的調整建議時,Service 會傳送此事件。您只能在已停用「自動調整」的網域中看到此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "3acb26c8-397c-4c89-a80a-ce672a864c55", "detail-type": "Amazon OpenSearch Service Auto-Tune Notification", "source": "aws.es", "account": "123456789012", "time": "2020-10-30T22:06:31Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Auto-Tune Event", "severity": "Informational", "status": "Pending", "description": "Auto-Tune recommends the following new settings for your domain: { JVM Heap size : 60%}. Enable Auto-Tune to improve cluster stability and performance.", "scheduleTime": "{iso8601-timestamp}" } }

自動調整已開始

OpenSearch 服務會在「自動調整」開始將新設定套用至您的網域時傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "3acb26c8-397c-4c89-a80a-ce672a864c55", "detail-type": "Amazon OpenSearch Service Auto-Tune Notification", "source": "aws.es", "account": "123456789012", "time": "2020-10-30T22:06:31Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Auto-Tune Event", "severity": "Informational", "status": "Started", "scheduleTime": "{iso8601-timestamp}", "startTime": "{iso8601-timestamp}", "description" : "Auto-Tune is applying the following settings to your domain: { JVM Heap size : 60%}." } }

自動調整需要排程的藍/綠部署

OpenSearch 當 Auto-Tune 識別出需要排程藍/綠部署的調整建議時,服務會傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "3acb26c8-397c-4c89-a80a-ce672a864c55", "detail-type": "Amazon OpenSearch Service Auto-Tune Notification", "source": "aws.es", "account": "123456789012", "time": "2020-10-30T22:06:31Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Auto-Tune Event", "severity": "Low", "status": "Pending", "startTime": "{iso8601-timestamp}", "description": "Auto-Tune has identified the following settings for your domain that require a blue/green deployment: { JVM Heap size : 60%}. You can schedule the deployment for your preferred time." } }

自動調整已取消

OpenSearch 因為沒有擱置的調整建議而取消「自動調整」排程時,Service 會傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "3acb26c8-397c-4c89-a80a-ce672a864c55", "detail-type": "Amazon OpenSearch Service Auto-Tune Notification", "source": "aws.es", "account": "123456789012", "time": "2020-10-30T22:06:31Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Auto-Tune Event", "severity": "Low", "status": "Cancelled", "scheduleTime": "{iso8601-timestamp}", "description": "Auto-Tune has cancelled the upcoming blue/green deployment." } }

自動調整已完成

OpenSearch 「自動調整」已完成藍/綠部署,且叢集正在使用新 JVM 設定的情況下運作時,「服務」會傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "3acb26c8-397c-4c89-a80a-ce672a864c55", "detail-type": "Amazon OpenSearch Service Auto-Tune Notification", "source": "aws.es", "account": "123456789012", "time": "2020-10-30T22:06:31Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Auto-Tune Event", "severity": "Informational", "status": "Completed", "completionTime": "{iso8601-timestamp}", "description": "Auto-Tune has completed the blue/green deployment and successfully applied the following settings: { JVM Heap size : 60%}." } }

自動調整已停用且變更已還原

OpenSearch 當「自動調整」已停用且套用的變更已復原時,「服務」會傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "3acb26c8-397c-4c89-a80a-ce672a864c55", "detail-type": "Amazon OpenSearch Service Auto-Tune Notification", "source": "aws.es", "account": "123456789012", "time": "2020-10-30T22:06:31Z", "region": "us-east-1", "resources": [ "arn:aws:es:us-east-1:123456789012:domain/test-domain" ], "detail": { "event": "Auto-Tune Event", "severity": "Informational", "status": "Completed", "description": "Auto-Tune is now disabled. All settings have been reverted. Auto-Tune will continue to evaluate cluster performance and provide recommendations.", "completionTime": "{iso8601-timestamp}" } }

自動調整已停用且變更已保留

OpenSearch 當「自動調整」已停用且套用的變更已保留時,「服務」會傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "3acb26c8-397c-4c89-a80a-ce672a864c55", "detail-type": "Amazon OpenSearch Service Auto-Tune Notification", "source": "aws.es", "account": "123456789012", "time": "2020-10-30T22:06:31Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Auto-Tune Event", "severity": "Informational", "status": "Completed", "description": "Auto-Tune is now disabled. The most-recent settings by Auto-Tune have been retained. Auto-Tune will continue to evaluate cluster performance and provide recommendations.", "completionTime": "{iso8601-timestamp}" } }

叢集運作狀態事件

OpenSearch 服務會在叢集的健全狀況受到損害 EventBridge 時傳送特定事件。

紅色叢集恢復已啟動

OpenSearch 服務會在叢集狀態持續變成紅色超過一小時後傳送此事件。其會嘗試自動從快照中恢復一個或多個紅色索引,以修復叢集狀態。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Cluster Status Notification", "source":"aws.es", "account":"123456789012", "time":"2016-11-01T13:12:22Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-domain" ], "detail":{ "event":"Automatic Snapshot Restore for Red Indices", "status":"Started", "severity":"High", "description":"Your cluster status is red. We have started automatic snapshot restore for the red indices. No action is needed from your side. Red indices [red-index-0, red-index-1]" } }

紅色叢集恢復部分完成

OpenSearch 當服務只能從快照還原紅色索引子集,同時嘗試修復紅色叢集狀態時,才會傳送此事件。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Cluster Status Notification", "source":"aws.es", "account":"123456789012", "time":"2016-11-01T13:12:22Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-domain" ], "detail":{ "event":"Automatic Snapshot Restore for Red Indices", "status":"Partially Restored", "severity":"High", "description":"Your cluster status is red. We were able to restore the following Red indices from snapshot: [red-index-0]. Indices not restored: [red-index-1]. Please refer https://docs.aws.amazon.com/opensearch-service/latest/developerguide/handling-errors.html#handling-errors-red-cluster-status for troubleshooting steps." } }

紅色叢集恢復失敗

OpenSearch 服務會在嘗試修復紅色叢集狀態時,無法還原任何索引時傳送此事件。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Cluster Status Notification", "source":"aws.es", "account":"123456789012", "time":"2016-11-01T13:12:22Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-domain" ], "detail":{ "event":"Automatic Snapshot Restore for Red Indices", "status":"Failed", "severity":"High", "description":"Your cluster status is red. We were unable to restore the Red indices automatically. Indices not restored: [red-index-0, red-index-1]. Please refer https://docs.aws.amazon.com/opensearch-service/latest/developerguide/handling-errors.html#handling-errors-red-cluster-status for troubleshooting steps." } }

待刪除的碎片

OpenSearch 當服務嘗試在紅色叢集狀態持續紅色 14 天之後自動修正紅色叢集狀態時,會傳送此事件,但一或多個索引仍為紅色。再過 7 天 (總共 21 天連續紅色) 之後, OpenSearch 服務會繼續刪除所有紅色索引上未指派的碎片

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Cluster Status Notification", "source":"aws.es", "account":"123456789012", "time":"2022-04-09T10:36:48Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-domain" ], "detail":{ "severity":"Medium", "description":"Your cluster status is red. Please fix the red indices as soon as possible. If not fixed by 2022-04-12 01:51:47+00:00, we will delete all unassigned shards, the unit of storage and compute, for these red indices to recover your domain and make it green. Please refer to https://docs.aws.amazon.com/opensearch-service/latest/developerguide/handling-errors.html#handling-errors-red-cluster-status for troubleshooting steps. test_data, test_data1", "event":"Automatic Snapshot Restore for Red Indices", "status":"Shard(s) to be deleted" } }

碎片已刪除

OpenSearch 服務會在您的叢集狀態持續變成紅色 21 天後傳送此事件。其會著手刪除所有紅色索引上的未指派碎片(儲存和運算)。如需詳細資訊,請參閱 紅色叢集的自動修復

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Cluster Status Notification", "source":"aws.es", "account":"123456789012", "time":"2022-04-09T10:54:48Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-domain" ], "detail":{ "severity":"High", "description":"We have deleted unassinged shards, the unit of storage and compute, in red indices: index-1, index-2 because these indices were red for more than 21 days and could not be restored with the automated restore process. Please refer to https://docs.aws.amazon.com/opensearch-service/latest/developerguide/handling-errors.html#handling-errors-red-cluster-status for troubleshooting steps.", "event":"Automatic Snapshot Restore for Red Indices", "status":"Shard(s) deleted" } }

高碎片計數警告

OpenSearch 當熱資料節點的平均碎片計數已超過建議預設限制 1,000 的 90% 時,服務會傳送此事件。雖然較新版本的 Elasticsearch 並 OpenSearch 支援可設定的每個節點最大碎片計數限制,但我們建議您每個節點的碎片不超過 1,000 個。請參閱選擇碎片數

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2016-11-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"High Shard Count", "status":"Warning", "severity":"Low", "description":"One or more data nodes have close to 1000 shards. To ensure optimum performance and stability of your cluster, please refer to the best practice guidelines - https://docs.aws.amazon.com/opensearch-service/latest/developerguide/sizing-domains.html#bp-sharding." } }

已超過碎片數量限制

OpenSearch 當熱資料節點的平均碎片計數超過建議的預設限制 1,000 時,Service 會傳送此事件。雖然較新版本的 Elasticsearch 並 OpenSearch 支援可設定的每個節點最大碎片計數限制,但我們建議您每個節點的碎片不超過 1,000 個。請參閱選擇碎片數

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2016-11-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"High Shard Count", "status":"Warning", "severity":"Medium", "description":"One or more data nodes have more than 1000 shards. To ensure optimum performance and stability of your cluster, please refer to the best practice guidelines - https://docs.aws.amazon.com/opensearch-service/latest/developerguide/sizing-domains.html#bp-sharding." } }

磁碟空間不足

OpenSearch 當叢集中的一個或多個節點的可用儲存空間少於 25% 或低於 25 GB 時,服務會傳送此事件。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2017-12-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"Low Disk Space", "status":"Warning", "severity":"Medium", "description":"One or more data nodes in your cluster has less than 25% of storage space or less than 25GB. Your cluster will be blocked for writes at 20% or 20GB. Please refer to the documentation for more information - https://docs.aws.amazon.com/opensearch-service/latest/developerguide/handling-errors.html#troubleshooting-cluster-block" } }

低磁碟浮水印違規

OpenSearch 當叢集中的所有節點都少於 10% 的可用儲存空間或小於 10 GB 時,服務會傳送此事件。當所有節點都違反低磁盤水印時,任何新索引都會產生黃色簇,並且當所有節點都低於高磁盤水印時,將導致紅色簇。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2017-12-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"Low Disk Watermark Breach", "status":"Warning", "severity":"Medium", "description":"Low Disk Watermark threshold is about to be breached. Once the threshold is breached, new index creation will be blocked on all nodes to prevent the cluster status from turning red. Please increase disk size to suit your storage needs. For more information, see https://docs.aws.amazon.com/opensearch-service/latest/developerguide/handling-errors.html#troubleshooting-cluster-block". } }

EBS 爆量餘額低於 70%

OpenSearch 當一個或多個資料節點上的 EBS 突發平衡低於 70% 時,服務會傳送此事件。EBS 爆量餘額損耗可能會導致廣泛的叢集無法使用和 I/O 請求限流,進而導致索引和搜尋請求的高延遲和逾時。如需修正此問題的步驟,請參閱 低 EBS 爆量餘額

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2017-12-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"EBS Burst Balance", "status":"Warning", "severity":"Medium", "description":"EBS burst balance on one or more data nodes is below 70%. Follow https://docs.aws.amazon.com/opensearch-service/latest/developerguide/handling-errors.html#handling-errors-low-ebs-burst to fix this issue." } }

EBS 爆量餘額低於 20%

OpenSearch 當一個或多個資料節點上的 EBS 突發平衡低於 20% 時,服務會傳送此事件。EBS 爆量餘額損耗可能會導致廣泛的叢集無法使用和 I/O 請求限流,進而導致索引和搜尋請求的高延遲和逾時。如需修正此問題的步驟,請參閱 低 EBS 爆量餘額

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2017-12-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"EBS Burst Balance", "status":"Warning", "severity":"High", "description":"EBS burst balance on one or more data nodes is below 20%. Follow https://docs.aws.amazon.com/opensearch-service/latest/developerguide/handling-errors.html#handling-errors-low-ebs-burst to fix this issue. } }

磁碟輸送量限流

OpenSearch 由於 EBS 磁碟區或 EC2 執行個體的輸送量限制,當網域的讀取和寫入請求受到限制時,服務會傳送此事件。如果您收到此通知,請考慮按照 AWS 建議的最佳做法擴展磁碟區或執行個體。如果您的磁碟區類型為gp2,請增加磁碟區大小。如果您的磁碟區類型為gp3,請佈建更多輸送量。您也可以檢查執行個體基礎和最大 EBS 輸送量是否大於或等於佈建的磁碟區輸送量,並且可以相應地擴展。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2017-12-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"Disk Throughput Throttle", "status":"Warning", "severity":"Medium", "description":"Your domain is experiencing throttling due to instance or volume throughput limitations. Please consider scaling your domain to suit your throughput needs. In July 2023, we improved the accuracy of throughput throttle calculation by replacing ‘Max volume throughput’ with ‘Provisioned volume throughput’. Please refer to the documentation for more information." } }

大碎片大小

OpenSearch 當叢集中的一個或多個碎片已超過 50GiB 或 65GiB 時,服務會傳送此事件。為了確保最佳的叢集效能和穩定性,請減少碎片大小。

如需詳細資訊,請參閱分片最佳做法

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2017-12-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"Large Shard Size", "status":"Warning", "severity":"Medium", "description":"One or more shards are larger than 65GiB. To ensure optimum cluster performance and stability, reduce shard sizes. For more information, see https://docs.aws.amazon.com/opensearch-service/latest/developerguide/monitoring-events.html#monitoring-events-large-shard-size." } }

高 JVM 用量

OpenSearch 當您網域的JVMMemoryPressure指標超過 80% 時,服務會傳送此事件。如果在 30 分鐘內超過 92%,則會封鎖叢集的所有寫入作業。為了確保最佳的叢集穩定性,請減少叢集的流量或調整網域,以提供足夠的記憶體來處理工作負載。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2017-12-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"High JVM Usage", "status":"Warning", "severity":"High", "description":"JVM memory pressure has exceeded 80%. If it exceeds 92% for 30 minutes, all write operations to your cluster will be blocked. To ensure optimum cluster stability, reduce traffic to the cluster or use larger instance types. For more information, see https://docs.aws.amazon.com/opensearch-service/latest/developerguide/monitoring-events.html#monitoring-events-high-jvm." } }

GC 不足

OpenSearch 當最大 JVM 超過 70% 且最大值和最小值之間的差異小於 30% 時,服務會發送此事件。這可能表示 JVM 無法在工作負載的記憶體回收週期期間回收足夠的記憶體。這可能會導致回應速度越來越慢,延遲時間越來越高;在某些情況下,甚至節點會因為運作狀態檢查逾時而中斷。為了確保最佳的叢集穩定性,請減少叢集的流量或調整網域,以提供足夠的記憶體來處理工作負載。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2017-12-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"Insufficient GC", "status":"Warning", "severity":"Medium", "description":"Maximum JVM is above 70% and JVM range is less than 30%. This may indicate insufficient garbage collection for your workload. For more information, see https://docs.aws.amazon.com/opensearch-service/latest/developerguide/monitoring-events.html#monitoring-events-insufficient-gc." } }

自訂索引路由警告

OpenSearch 當您的域處於處理狀態並包含具有自定義 index.routing.allocation 設置的索引時,服務發送此事件,這可能會導致藍綠色部署卡住。確認設定已正確套用。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2017-12-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"Custom Index Routing Warning", "status":"Warning", "severity":"Medium", "description":"Your domain is in processing state and contains indice(s) with custom index.routing.allocation settings which can cause blue-green deployments to get stuck. Verify settings are applied properly. For more information, see https://docs.aws.amazon.com/opensearch-service/latest/developerguide/monitoring-events.html#monitoring-events-index-routing." } }

碎片鎖定失敗

OpenSearch 當您的域由於未分配的碎片而不健康時,服務將發送此事件。[ShardLockObtainFailedException]如需詳細資訊,請參閱如何解決 Amazon OpenSearch 服務中的記憶體內碎片鎖定例外狀況

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2017-12-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"Failed Shard Lock", "status":"Warning", "severity":"Medium", "description":"Your domain is unhealthy due to unassigned shards with [ShardLockObtainFailedException]. For more information, see https://docs.aws.amazon.com/opensearch-service/latest/developerguide/monitoring-events.html#monitoring-events-failed-shard-lock." }

VPC 端點事件

OpenSearch 服務會將某些事件傳送至 EventBridge 與AWS PrivateLink 介面端點相關。

VPC 端點建立失敗

OpenSearch 服務會在無法建立要求的 VPC 端點時傳送此事件。發生此錯誤的原因可能是您已達到一個區域內允許的 VPC 端點數目上限。如果指定的子網路或安全群組不存在,您也會看到這個錯誤。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service VPC Endpoint Notification", "source":"aws.es", "account":"123456789012", "time":"2016-11-01T13:12:22Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-domain" ], "detail":{ "event":"VPC Endpoint Create Validation", "status":"Failed", "severity":"High", "description":"Unable to create VPC endpoint aos-0d4c74c0342343 for domain arn:aws:es:eu-south-1:123456789012:domain/my-domain due to the following validation failures: You've reached the limit on the number of VPC endpoints that you can create in the AWS Region." } }

VPC 端點更新失敗

OpenSearch 服務會在無法刪除要求的 VPC 端點時傳送此事件。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service VPC Endpoint Notification", "source":"aws.es", "account":"123456789012", "time":"2016-11-01T13:12:22Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-domain" ], "detail":{ "event":"VPC Endpoint Update Validation", "status":"Failed", "severity":"High", "description":"Unable to update VPC endpoint aos-0d4c74c0342343 for domain arn:aws:es:eu-south-1:123456789012:domain/my-domain due to the following validation failures: <failure message>." } }

VPC 端點刪除失敗

OpenSearch 服務會在無法刪除要求的 VPC 端點時傳送此事件。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service VPC Endpoint Notification", "source":"aws.es", "account":"123456789012", "time":"2016-11-01T13:12:22Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-domain" ], "detail":{ "event":"VPC Endpoint Delete Validation", "status":"Failed", "severity":"High", "description":"Unable to delete VPC endpoint aos-0d4c74c0342343 for domain arn:aws:es:eu-south-1:123456789012:domain/my-domain due to the following validation failures: Specified subnet doesn't exist." } }

節點淘汰事件

OpenSearch 當發生下列節點淘汰事件之一 EventBridge 時,Service 會傳送事件至。

節點處分已排程

OpenSearch 服務會在已排定節點淘汰時傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Notification", "source": "aws.es", "account": "123456789012", "time": "2023-04-07T10:07:33Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Node Retirement Notification", "status": "Scheduled", "severity": "Medium", "description": "An automated action to retire and replace a node has been scheduled on your domain. The node will be replaced in the next off-peak window. For more information, see https://docs.aws.amazon.com/opensearch-service/latest/developerguide/monitoring-events.html." } }

節點淘汰已完成

OpenSearch 服務會在節點處分完成時傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Notification", "source": "aws.es", "account": "123456789012", "time": "2023-04-07T10:07:33Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Node Retirement Notification", "status": "Completed", "severity": "Medium", "description": "The node has been retired and replaced with a new node." } }

節點淘汰失敗

OpenSearch 服務會在節點淘汰失敗時傳送此事件。

範例

以下為此類事件的範例:

{ "version": "0", "id": "01234567-0123-0123-0123-012345678901", "detail-type": "Amazon OpenSearch Service Notification", "source": "aws.es", "account": "123456789012", "time": "2023-04-07T10:07:33Z", "region": "us-east-1", "resources": ["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail": { "event": "Node Retirement Notification", "status": "Failed", "severity": "Medium", "description": "Node retirement failed. No actions are required from your end. We will automatically retry replacing the node." } }

降級的節點淘汰事件

OpenSearch 服務會在因節點上的硬體降級而需要取代節點時傳送這些事件。

降級節點淘汰通知

OpenSearch 當已針對您的網域排定淘汰和取代降級節點的自動動作時,Service 會傳送此事件。

範例

以下為此類事件的範例:

{ "version":"0", "id":"db233454-aad1-7676-3b15-10a84b052baa", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2024-01-11T08:16:06Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-node-replacement" ], "detail":{ "severity":"Medium", "description":"An automated action to retire and replace a node has been scheduled on your domain. For more information, please see https://docs.aws.amazon.com/opensearch-service/latest/developerguide/monitoring-events.html.", "event":"Degraded Node Retirement Notification", "status":"Scheduled" } }

降級節點處分完成

OpenSearch 服務會在降級的節點已淘汰並以新節點取代時傳送此事件。

範例

以下為此類事件的範例:

{ "version":"0", "id":"7444215c-90f9-a52d-bcda-e85973a9a762", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2024-01-11T10:20:30Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-node-replacement" ], "detail":{ "severity":"Medium", "description":"The node has been retired and replaced with a new node.", "event":"Degraded Node Retirement Notification", "status":"Completed" } }

降級的節點淘汰失敗

OpenSearch 如果降級的節點淘汰失敗,服務就會傳送此事件。

範例

以下為此類事件的範例:

{ "version":"0", "id":"c328e9bb-93b9-c0b2-b17a-df527fdf96b6", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2024-01-11T08:31:38Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-node-replacement" ], "detail":{ "severity":"Medium", "description":"Node retirement failed. No actions are required from your end. We will automatically re-try replacing the node.", "event":"Degraded Node Retirement Notification", "status":"Failed" } }

網域錯誤事件

OpenSearch 發生下列網域錯誤之一 EventBridge 時,服務會傳送事件至。

網域更新驗證失敗

OpenSearch 服務會在嘗試更新或執行網域上的組態變更時,如果遇到一或多個驗證失敗,就會傳送此事件。如需解決這些失敗的步驟,請參閱 對驗證錯誤進行疑難排解

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Domain Update Notification", "source":"aws.es", "account":"123456789012", "time":"2016-11-01T13:12:22Z", "region":"us-east-1", "resources":[ "arn:aws:es:us-east-1:123456789012:domain/test-domain" ], "detail":{ "event":"Domain Update Validation", "status":"Failed", "severity":"High", "description":"Unable to perform updates to your domain due to the following validation failures: <failures> Please see the documentation for more information https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-configuration-changes.html#validation" } }

無法存取 KMS 金鑰

OpenSearch 服務在無法訪問您的 AWS KMS 密鑰時發送此事件。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Domain Error Notification", "source":"aws.es", "account":"123456789012", "time":"2016-11-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"KMS Key Inaccessible", "status":"Error", "severity":"High", "description":"The KMS key associated with this domain is inaccessible. You are at risk of losing access to your domain. For more information, please refer to https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html#disabled-key." } }

網域隔離

OpenSearch 服務會在您的網域變成隔離狀態,而且因為網路無法連線而無法接收、讀取或寫入要求時,就會傳送此事件。

範例

以下為此類事件的範例:

{ "version":"0", "id":"01234567-0123-0123-0123-012345678901", "detail-type":"Amazon OpenSearch Service Notification", "source":"aws.es", "account":"123456789012", "time":"2023-11-01T13:12:22Z", "region":"us-east-1", "resources":["arn:aws:es:us-east-1:123456789012:domain/test-domain"], "detail":{ "event":"Domain Isolation Notification", "status":"Error", "severity":"High", "description":"Your OpenSearch Service domain has been isolated. An isolated domain is unreachable by network and cannot receive, read, or write requests. For more information and assistance, please contact AWS Support at https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html#disabled-key." } }