CloudWatch

AWS CloudWatch é um serviço de monitoramento e observabilidade que fornece dados e insights acionáveis para recursos, aplicações e serviços da AWS. O CloudWatch coleta dados de monitoramento e operação na forma de logs, métricas e eventos, oferecendo uma visão unificada do seu ambiente AWS.

Com a integração do CloudWatch, você pode:

  • Consultar Logs (Insights): Execute consultas do CloudWatch Log Insights em um ou mais log groups para analisar dados de log com uma linguagem de consulta poderosa
  • Descrever Log Groups: Liste os log groups do CloudWatch disponíveis na sua conta, opcionalmente filtrados por prefixo de nome
  • Obter Log Events: Recupere eventos de log de um log stream específico dentro de um log group
  • Descrever Log Streams: Liste log streams dentro de um log group, ordenados pelo horário do último evento ou filtrados por prefixo de nome
  • Listar Métricas: Navegue pelas métricas do CloudWatch disponíveis, opcionalmente filtradas por namespace, nome da métrica ou atividade recente
  • Obter Estatísticas de Métricas: Recupere dados estatísticos de uma métrica em um intervalo de tempo especificado, com granularidade configurável
  • Publicar Métrica: Publique pontos de dados de métricas personalizadas no CloudWatch para monitoramento da sua própria aplicação
  • Descrever Alarmes: Liste e filtre alarmes do CloudWatch por prefixo de nome, estado ou tipo de alarme

No Zoen, a integração do CloudWatch permite que seus agentes monitorem a infraestrutura AWS, analisem logs de aplicação, acompanhem métricas personalizadas e respondam a estados de alarme como parte de fluxos de trabalho automatizados de DevOps e SRE. Isso é especialmente poderoso quando combinado com outras integrações AWS como CloudFormation e SNS para gerenciamento de infraestrutura de ponta a ponta.

Usage Instructions

Integrate AWS CloudWatch into workflows. Run Log Insights queries, list log groups, retrieve log events, list and get metrics, and monitor alarms. Requires AWS access key and secret access key.

Actions

cloudwatch_query_logs

Run a CloudWatch Log Insights query against one or more log groups

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
logGroupNamesarrayYesLog group names to query
queryStringstringYesCloudWatch Log Insights query string
startTimenumberYesStart time as Unix epoch seconds
endTimenumberYesEnd time as Unix epoch seconds
limitnumberNoMaximum number of results to return

Output

ParameterTypeDescription
resultsarrayQuery result rows (each row is a key/value map of field name to value)
statisticsobjectQuery statistics
bytesScannednumberTotal bytes of log data scanned
recordsMatchednumberNumber of log records that matched the query
recordsScannednumberTotal log records scanned
statusstringQuery completion status (Complete, Failed, Cancelled, or Timeout)

cloudwatch_filter_log_events

Search log events across all streams in a log group by filter pattern and time range, without writing a Log Insights query

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
logGroupNamestringYesCloudWatch log group name to search
filterPatternstringNoCloudWatch Logs filter pattern (e.g., "ERROR", "?ERROR ?Exception"). Matches all events if omitted.
logStreamNamePrefixstringNoOnly search log streams whose name starts with this prefix
startTimenumberNoStart time as Unix epoch seconds
endTimenumberNoEnd time as Unix epoch seconds
startFromHeadbooleanNoReturn the earliest matching events first instead of the latest
limitnumberNoMaximum number of events to return

Output

ParameterTypeDescription
eventsarrayMatching log events across all searched streams, sorted by timestamp
logStreamNamestringLog stream the event belongs to
timestampnumberEvent timestamp in epoch milliseconds
messagestringLog event message
ingestionTimenumberIngestion time in epoch milliseconds

cloudwatch_describe_log_groups

List available CloudWatch log groups

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
prefixstringNoFilter log groups by name prefix
limitnumberNoMaximum number of log groups to return

Output

ParameterTypeDescription
logGroupsarrayList of CloudWatch log groups with metadata
logGroupNamestringLog group name
arnstringLog group ARN
storedBytesnumberTotal stored bytes
retentionInDaysnumberRetention period in days (if set)
creationTimenumberCreation time in epoch milliseconds

cloudwatch_get_log_events

Retrieve log events from a specific CloudWatch log stream

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
logGroupNamestringYesCloudWatch log group name
logStreamNamestringYesCloudWatch log stream name
startTimenumberNoStart time as Unix epoch seconds
endTimenumberNoEnd time as Unix epoch seconds
limitnumberNoMaximum number of events to return

Output

ParameterTypeDescription
eventsarrayLog events with timestamp, message, and ingestion time
timestampnumberEvent timestamp in epoch milliseconds
messagestringLog event message
ingestionTimenumberIngestion time in epoch milliseconds

cloudwatch_describe_log_streams

List log streams within a CloudWatch log group

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
logGroupNamestringYesCloudWatch log group name
prefixstringNoFilter log streams by name prefix
limitnumberNoMaximum number of log streams to return

Output

ParameterTypeDescription
logStreamsarrayList of log streams with metadata, sorted by last event time (most recent first) unless a prefix filter is applied
logStreamNamestringLog stream name
lastEventTimestampnumberTimestamp of the last log event in epoch milliseconds
firstEventTimestampnumberTimestamp of the first log event in epoch milliseconds
creationTimenumberStream creation time in epoch milliseconds
storedBytesnumberTotal stored bytes

cloudwatch_put_log_group_retention

Set (or clear, for never-expire) the retention period for a CloudWatch log group

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
logGroupNamestringYesCloudWatch log group name
retentionInDaysnumberNoDays to retain log events (one of 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1096, 1827, 2192, 2557, 2922, 3288, 3653). Omit to make events never expire.

Output

ParameterTypeDescription
successbooleanWhether the retention policy was updated
logGroupNamestringLog group the policy applies to
retentionInDaysnumberRetention period in days, or null if events never expire

cloudwatch_list_metrics

List available CloudWatch metrics

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
namespacestringNoFilter by namespace (e.g., AWS/EC2, AWS/Lambda)
metricNamestringNoFilter by metric name
recentlyActivebooleanNoOnly show metrics active in the last 3 hours
limitnumberNoMaximum number of metrics to return

Output

ParameterTypeDescription
metricsarrayList of metrics with namespace, name, and dimensions
namespacestringMetric namespace (e.g., AWS/EC2)
metricNamestringMetric name (e.g., CPUUtilization)
dimensionsarrayArray of name/value dimension pairs

cloudwatch_get_metric_statistics

Get statistics for a CloudWatch metric over a time range

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
namespacestringYesMetric namespace (e.g., AWS/EC2, AWS/Lambda)
metricNamestringYesMetric name (e.g., CPUUtilization, Invocations)
startTimenumberYesStart time as Unix epoch seconds
endTimenumberYesEnd time as Unix epoch seconds
periodnumberYesGranularity in seconds (e.g., 60, 300, 3600)
statisticsarrayYesStatistics to retrieve (Average, Sum, Minimum, Maximum, SampleCount)
dimensionsstringNoDimensions as JSON (e.g., {"InstanceId": "i-1234"})

Output

ParameterTypeDescription
labelstringMetric label returned by CloudWatch
datapointsarrayDatapoints sorted by timestamp with statistics values
timestampnumberDatapoint timestamp in epoch milliseconds
averagenumberAverage statistic value
sumnumberSum statistic value
minimumnumberMinimum statistic value
maximumnumberMaximum statistic value
sampleCountnumberSample count statistic value
unitstringUnit of the metric

cloudwatch_put_metric_data

Publish a custom metric data point to CloudWatch

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
namespacestringYesMetric namespace (e.g., Custom/MyApp)
metricNamestringYesName of the metric
valuenumberYesMetric value to publish
unitstringNoUnit of the metric (e.g., Count, Seconds, Bytes)
dimensionsstringNoJSON string of dimension name/value pairs

Output

ParameterTypeDescription
successbooleanWhether the metric was published successfully
namespacestringMetric namespace
metricNamestringMetric name
valuenumberPublished metric value
unitstringMetric unit
timestampstringTimestamp when the metric was published

cloudwatch_describe_alarms

List and filter CloudWatch alarms

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
alarmNamePrefixstringNoFilter alarms by name prefix
stateValuestringNoFilter by alarm state (OK, ALARM, INSUFFICIENT_DATA)
alarmTypestringNoFilter by alarm type (MetricAlarm, CompositeAlarm)
limitnumberNoMaximum number of alarms to return

Output

ParameterTypeDescription
alarmsarrayList of CloudWatch alarms with state and configuration
alarmNamestringAlarm name
alarmArnstringAlarm ARN
stateValuestringCurrent state (OK, ALARM, INSUFFICIENT_DATA)
stateReasonstringHuman-readable reason for the state
metricNamestringMetric name (MetricAlarm only)
namespacestringMetric namespace (MetricAlarm only)
thresholdnumberThreshold value (MetricAlarm only)
stateUpdatedTimestampnumberEpoch ms when state last changed

cloudwatch_describe_alarm_history

Retrieve state-change and configuration history for CloudWatch alarms

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
alarmNamestringNoName of a specific alarm to retrieve history for. Omit for all alarms.
historyItemTypestringNoFilter by history item type (ConfigurationUpdate, StateUpdate, Action, AlarmContributorStateUpdate, AlarmContributorAction)
startDatenumberNoStart of the history window as Unix epoch seconds
endDatenumberNoEnd of the history window as Unix epoch seconds
scanBystringNoSort order: TimestampDescending (newest first) or TimestampAscending
limitnumberNoMaximum number of history records to return

Output

ParameterTypeDescription
alarmHistoryItemsarrayAlarm history items sorted per scanBy, newest first by default
alarmNamestringName of the alarm this history item belongs to
alarmTypestringMetricAlarm or CompositeAlarm
timestampnumberEpoch ms when the history item occurred
historyItemTypestringConfigurationUpdate, StateUpdate, Action, or contributor variants
historySummarystringHuman-readable summary of the event

cloudwatch_mute_alarm

Create a CloudWatch alarm mute rule that suppresses alarms for a fixed duration

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
muteRuleNamestringYesUnique name for the mute rule (used later to unmute)
alarmNamesarrayYesNames of the CloudWatch alarms this mute rule targets
durationValuenumberYesHow long the mute lasts (paired with durationUnit)
durationUnitstringYesUnit for durationValue: minutes, hours, or days
descriptionstringNoOptional description of why the alarms are being muted
startDatenumberNoWhen the mute window begins as Unix epoch seconds. Defaults to now (mute starts immediately).

Output

ParameterTypeDescription
successbooleanWhether the mute rule was created successfully
muteRuleNamestringName of the mute rule that was created
alarmNamesarrayNames of the alarms this rule mutes
expressionstringSchedule expression used by the mute rule
durationstringISO 8601 duration of the mute window

cloudwatch_unmute_alarm

Delete a CloudWatch alarm mute rule, restoring alarm notifications

Input

ParameterTypeRequiredDescription
awsRegionstringYesAWS region (e.g., us-east-1)
awsAccessKeyIdstringYesAWS access key ID
awsSecretAccessKeystringYesAWS secret access key
muteRuleNamestringYesName of the mute rule to delete

Output

ParameterTypeDescription
successbooleanWhether the mute rule was deleted successfully
muteRuleNamestringName of the mute rule that was deleted

On this page