Skip to content

Bots From Extension: aws-cloudwatch-v2

AWS CloudWatch - Logs and Metric collection from AWS Cloudwatch

This extension provides 5 bots.





Bot @aws-cw-v2:log-events

Bot Position In Pipeline: Source Sink

Collect log events from the specified log stream AWS CloudWatch Logs

This bot expects a Restricted CFXQL.

Each parameter may be specified using '=' operator and AND logical operation
Following are the parameters expected for this Bot

Parameter Name Type Default Value Description
region Text AWS Region Name. Comma separated. Searches all regions when not set.
account_ids_column Text Column name in the input dataset holding AWS account ids to collect from instead of discovering
org accounts (requires discover_org_accounts)
log_group_name* Text The name of the log group to search.
timestamp* DateTime Collects the data for a specified time period, supports CFXQL format.
pattern Text The filter pattern to use.







Bot @aws-cw-v2:log-groups

Bot Position In Pipeline: Source Sink

List the specified log groups from AWS CloudWatch Logs

This bot expects a Restricted CFXQL.

Each parameter may be specified using '=' operator and AND logical operation
Following are the parameters expected for this Bot

Parameter Name Type Default Value Description
region Text AWS Region Name. Comma separated. Collects from all regions when not set.
concurrent_discovery Text 10 Number of concurrent threads to run per account
account_ids_column Text Column name in the input dataset holding AWS account ids to collect from instead of discovering
org accounts (requires discover_org_accounts)







Bot @aws-cw-v2:metric-alarms

Bot Position In Pipeline: Source Sink

Collect active metric alarms from AWS CloudWatch

This bot expects a Restricted CFXQL.

Each parameter may be specified using '=' operator and AND logical operation
Following are the parameters expected for this Bot

Parameter Name Type Default Value Description
region Text AWS Region Name. Comma separated. Collects from all regions when not set.
concurrent_discovery Text 10 Number of concurrent threads to run per account
account_ids_column Text Column name in the input dataset holding AWS account ids to collect from instead of discovering
org accounts (requires discover_org_accounts)







Bot @aws-cw-v2:metric-data

Bot Position In Pipeline: Sink

Collect metric data for a specified time period from AWS CloudWatch

This bot expects a Restricted CFXQL.

Each parameter may be specified using '=' operator and AND logical operation
Following are the parameters expected for this Bot

Parameter Name Type Default Value Description
timestamp* DateTime Collects the data for a specified time period, supports CFXQL format.
concurrent_discovery Text 10 Number of concurrent threads to run per account
account_ids_column Text Column in the input dataset holding the AWS account id to collect each row against. Defaults
to 'account_id' when that column is present.
resource_id_column Text Column in the input dataset holding the resource id to scope each metric query to. Unless resource_dimension_column
is also set, the column name is used as the CloudWatch dimension (a column named InstanceId
sends Dimensions [{Name: InstanceId, Value: <cell>}]). Defaults to the first known resource
dimension column in the input.
resource_dimension_column Text Column whose cells hold the CloudWatch dimension name for each row (e.g. 'InstanceId', 'VolumeId').
Use with resource_id_column when one generic id column carries mixed resource types. When not
set, the dimension comes from resource_id_column's own column name.







Bot @aws-cw-v2:metrics-list

Bot Position In Pipeline: Source Sink

Collect metric list information from AWS CloudWatch

This bot expects a Restricted CFXQL.

Each parameter may be specified using '=' operator and AND logical operation
Following are the parameters expected for this Bot

Parameter Name Type Default Value Description
region Text AWS Region Name. Comma separated. Collects from all regions when not set.
concurrent_discovery Text 10 Number of concurrent threads to run per account
account_ids_column Text Column name in the input dataset holding AWS account ids to collect from instead of discovering
org accounts (requires discover_org_accounts)