Cloud watch metrics unavailable if not triggered

1

Hi,

I am trying to set up alarms for DNSSec failure events in cloud watch. However, when i go to Cloudwatch, I cannot see the DNSSECInternalFailure or DNSSECKeySigningKeysNeedingAction Metrics in available metrics. Is this a limitation or can this be fixed?

1개 답변
3
수락된 답변

Hey Ali,

So Route 53 service is a Global service and the metrics are only available in us-east-1 region(1) - if you are checking other regions please check your region. Further, if you still cannot find DNSSECInternalFailure and DNSSECKeySigningKeysNeedingAction metrics on us-east-1 region then that means those metrics haven't been created yet because the conditions of those metrics haven't occurred.

To create Alarm based on a Metric that is not yet created - you can select one of the Existing metrics of the Route 53 Hosted zone that you are monitoring and edit the Source page when on Metric Selection to edit the Metric name from the source code and Update it. Then you can create the Alarm on a metric that is not yet created, and when the metric is created it will be automatically populated on the Alarm. Important thing is to configure the metric correctly with correct dimensions included.

According to (1), you only need to specify HostedZoneId dimension to the DNSSECInternalFailure and DNSSECKeySigningKeysNeedingAction metrics.

Hope this helps and happy to discuss further.

Thanks

AWS
지원 엔지니어
답변함 2년 전
  • Thank you. So I was correct in understanding that to be able to create alarms using the CloudWatch console the event needs to have occurred. Thank you for the clarification and the solution. Have a great day.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠