Cloud watch metrics unavailable if not triggered

1

Hi,

I am trying to set up alarms for DNSSec failure events in cloud watch. However, when i go to Cloudwatch, I cannot see the DNSSECInternalFailure or DNSSECKeySigningKeysNeedingAction Metrics in available metrics. Is this a limitation or can this be fixed?

1 Respuesta
3
Respuesta aceptada

Hey Ali,

So Route 53 service is a Global service and the metrics are only available in us-east-1 region(1) - if you are checking other regions please check your region. Further, if you still cannot find DNSSECInternalFailure and DNSSECKeySigningKeysNeedingAction metrics on us-east-1 region then that means those metrics haven't been created yet because the conditions of those metrics haven't occurred.

To create Alarm based on a Metric that is not yet created - you can select one of the Existing metrics of the Route 53 Hosted zone that you are monitoring and edit the Source page when on Metric Selection to edit the Metric name from the source code and Update it. Then you can create the Alarm on a metric that is not yet created, and when the metric is created it will be automatically populated on the Alarm. Important thing is to configure the metric correctly with correct dimensions included.

According to (1), you only need to specify HostedZoneId dimension to the DNSSECInternalFailure and DNSSECKeySigningKeysNeedingAction metrics.

Hope this helps and happy to discuss further.

Thanks

AWS
INGENIERO DE SOPORTE
respondido hace 2 años
  • Thank you. So I was correct in understanding that to be able to create alarms using the CloudWatch console the event needs to have occurred. Thank you for the clarification and the solution. Have a great day.

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas