Cloud watch metrics unavailable if not triggered

1

Hi,

I am trying to set up alarms for DNSSec failure events in cloud watch. However, when i go to Cloudwatch, I cannot see the DNSSECInternalFailure or DNSSECKeySigningKeysNeedingAction Metrics in available metrics. Is this a limitation or can this be fixed?

1 réponse
3
Réponse acceptée

Hey Ali,

So Route 53 service is a Global service and the metrics are only available in us-east-1 region(1) - if you are checking other regions please check your region. Further, if you still cannot find DNSSECInternalFailure and DNSSECKeySigningKeysNeedingAction metrics on us-east-1 region then that means those metrics haven't been created yet because the conditions of those metrics haven't occurred.

To create Alarm based on a Metric that is not yet created - you can select one of the Existing metrics of the Route 53 Hosted zone that you are monitoring and edit the Source page when on Metric Selection to edit the Metric name from the source code and Update it. Then you can create the Alarm on a metric that is not yet created, and when the metric is created it will be automatically populated on the Alarm. Important thing is to configure the metric correctly with correct dimensions included.

According to (1), you only need to specify HostedZoneId dimension to the DNSSECInternalFailure and DNSSECKeySigningKeysNeedingAction metrics.

Hope this helps and happy to discuss further.

Thanks

AWS
INGÉNIEUR EN ASSISTANCE TECHNIQUE
répondu il y a 2 ans
  • Thank you. So I was correct in understanding that to be able to create alarms using the CloudWatch console the event needs to have occurred. Thank you for the clarification and the solution. Have a great day.

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions