Cloud watch metrics unavailable if not triggered

1

Hi,

I am trying to set up alarms for DNSSec failure events in cloud watch. However, when i go to Cloudwatch, I cannot see the DNSSECInternalFailure or DNSSECKeySigningKeysNeedingAction Metrics in available metrics. Is this a limitation or can this be fixed?

1 Answer
3
Accepted Answer

Hey Ali,

So Route 53 service is a Global service and the metrics are only available in us-east-1 region(1) - if you are checking other regions please check your region. Further, if you still cannot find DNSSECInternalFailure and DNSSECKeySigningKeysNeedingAction metrics on us-east-1 region then that means those metrics haven't been created yet because the conditions of those metrics haven't occurred.

To create Alarm based on a Metric that is not yet created - you can select one of the Existing metrics of the Route 53 Hosted zone that you are monitoring and edit the Source page when on Metric Selection to edit the Metric name from the source code and Update it. Then you can create the Alarm on a metric that is not yet created, and when the metric is created it will be automatically populated on the Alarm. Important thing is to configure the metric correctly with correct dimensions included.

According to (1), you only need to specify HostedZoneId dimension to the DNSSECInternalFailure and DNSSECKeySigningKeysNeedingAction metrics.

Hope this helps and happy to discuss further.

Thanks

AWS
SUPPORT ENGINEER
answered 2 years ago
  • Thank you. So I was correct in understanding that to be able to create alarms using the CloudWatch console the event needs to have occurred. Thank you for the clarification and the solution. Have a great day.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions