Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view

Large diffs are not rendered by default.

Original file line number Diff line number Diff line change
@@ -0,0 +1,61 @@
{
"name": "aws_elb",
"version": "1.0.0",
"displayName": "AWS ELB",
"description": "AWS Elastic Load Balancer collector",
"license": "Apache-2.0",
"type": "logs",
"author": "Daniel Dong",
"sourceUrl": "https://github.com/YANG-DB/observability/tree/aws_alb_integration",
"statics": {
"logo": {
"annotation": "ELB Logo",
"path": "logo.png"
},
"gallery": [
{
"annotation": "ELB Dashboard",
"path": "dashboard1.png"
},
{
"annotation": "ELB Logo",
"path": "logo.png"
}
]
},
"components": [
{
"name": "communication",
"version": "1.0.0"
},
{
"name": "http",
"version": "1.0.0"
},
{
"name": "cloud",
"version": "1.0.0"
},
{
"name": "aws_elb",
"version": "1.0.0"
},
{
"name": "container",
"version": "1.0.0"
},
{
"name": "logs",
"version": "1.0.0"
}
],
"assets": {
"savedObjects": {
"name": "aws_elb",
"version": "1.0.0"
}
},
"sampleData": {
"path": "sample.json"
}
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,107 @@
[
{
"request_type": "http",
"timestamp": "2023-06-21T21:49:46.564177Z",
"elb": "app/sample-alb/cf9f5ec40b8480db",
"client_ip": "15.248.1.132",
"client_port": "33556",
"target_ip": "172.31.32.179",
"target_port": "80",
"request_processing_time": "0.000",
"target_processing_time": "0.001",
"response_processing_time": "0.000",
"elb_status_code": "200",
"target_status_code": "200",
"received_bytes": "521",
"sent_bytes": "271",
"request": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1",
"http_method": "GET",
"http_protocol": "http",
"http_host": "sample-alb-351248157.us-west-2.elb.amazonaws.com",
"http_port": "80",
"http_path": "/",
"http_version": "1.1",
"useragent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36",
"target_group_arn": "arn:aws:elasticloadbalancing:us-west-2:443273586136:targetgroup/sample-target/d34d9a810a60a6a5",
"trace_id": "Root=1-6493707a-062e3d077d0e7f5759a83c88",
"matched_rule_priority": "0",
"request_creation_time": "2023-06-21T21:49:46.563000Z",
"actions_executed": "forward",
"target_port_list": "172.31.32.179:80",
"target_status_code_list": "200",
"@message": "http 2023-06-21T21:49:46.564177Z app/sample-alb/cf9f5ec40b8480db 15.248.1.132:33556 172.31.32.179:80 0.000 0.001 0.000 200 200 521 271 \"GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36\" - - arn:aws:elasticloadbalancing:us-west-2:443273586136:targetgroup/sample-target/d34d9a810a60a6a5 \"Root=1-6493707a-062e3d077d0e7f5759a83c88\" \"-\" \"-\" 0 2023-06-21T21:49:46.563000Z \"forward\" \"-\" \"-\" \"172.31.32.179:80\" \"200\" \"-\" \"-\"",
"@timestamp": "2023-06-21T21:49:46.564177+00:00",
"@log_type": "alb",
"@log_s3bucket": "aes-siem-443273586136-log",
"@log_s3key": "AWSLogs/443273586136/elasticloadbalancing/us-west-2/2023/06/21/443273586136_elasticloadbalancing_us-west-2_app.sample-alb.cf9f5ec40b8480db_20230621T2150Z_54.149.97.75_5whmheve.log.gz",
"event": {
"module": "alb",
"kind": "event",
"category": [
"web"
]
},
"attributes": {
"sample": "true",
"data_stream": {
"type": "logs",
"namespace": "production",
"dataset": "aws_elb.access"
}
},
"@id": "e3fef9c3fc77734e1a23e2ba86407789",
"ecs": {
"version": "1.10.0"
},
"cloud": {
"provider": "aws",
"account": {
"id": "443273586136"
},
"region": "us-west-2"
},
"destination": {
"address": "172.31.32.179",
"ip": "172.31.32.179",
"port": "80"
},
"http": {
"request": {
"bytes": "521",
"method": "GET"
},
"response": {
"bytes": "271",
"status_code": "200"
},
"version": "1.1"
},
"related": {
"ip": [
"15.248.1.132",
"172.31.32.179"
]
},
"source": {
"address": "15.248.1.132",
"ip": "15.248.1.132",
"port": "33556"
},
"url": {
"domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com",
"path": "/",
"port": "80",
"scheme": "http",
"full": "http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/"
},
"user_agent": {
"original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36",
"name": "Chrome",
"version": "114.0.0",
"os.name": "Mac OS X",
"os.full": "Mac OS X 10.15.7",
"os.version": "10.15.7",
"device.name": "Mac"
}
}
]
Original file line number Diff line number Diff line change
@@ -0,0 +1,90 @@
{
"template": {
"mappings": {
"_meta": {
"version": "1.0.0",
"catalog": "observability",
"type": "logs",
"component": "aws_elb"
},
"properties": {
"aws": {
"type": "object",
"elb": {
"properties": {
"backend.ip": {
"type": "ip"
},
"backend.port": {
"type": "integer"
},
"backend.processing_time": {
"type": "half_float"
},
"backend.status_code": {
"type": "short"
},
"client.ip": {
"type": "ip"
},
"client.port": {
"type": "integer"
},
"connection_time": {
"type": "integer"
},
"destination.ip": {
"type": "ip"
},
"destination.port": {
"type": "integer"
},
"elb_status_code": {
"type": "short"
},
"http.port": {
"type": "integer"
},
"http.version": {
"type": "keyword"
},
"matched_rule_priority": {
"type": "integer"
},
"received_bytes": {
"type": "integer"
},
"request_creation_time": {
"type": "date"
},
"request_processing_time": {
"type": "half_float"
},
"response_processing_time": {
"type": "half_float"
},
"sent_bytes": {
"type": "integer"
},
"target_ip": {
"type": "ip"
},
"target_port": {
"type": "integer"
},
"target_processing_time": {
"type": "half_float"
},
"target_status_code": {
"type": "short"
},
"timestamp": {
"type": "date"
}
}
}
}
}
}
}
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,76 @@
{
"template": {
"mappings": {
"_meta": {
"version": "1.0.0",
"catalog": "observability",
"type": "logs",
"component": "cloud"
},
"properties": {
"cloud": {
"properties": {
"provider": {
"type": "keyword"
},
"availability_zone": {
"type": "keyword"
},
"region": {
"type": "keyword"
},
"machine": {
"type": "object",
"properties": {
"type": {
"type": "keyword"
}
}
},
"account": {
"type": "object",
"properties": {
"id": {
"type": "keyword"
},
"name": {
"type": "keyword"
}
}
},
"service": {
"type": "object",
"properties": {
"name": {
"type": "keyword"
}
}
},
"project": {
"type": "object",
"properties": {
"id": {
"type": "keyword"
},
"name": {
"type": "keyword"
}
}
},
"instance": {
"type": "object",
"properties": {
"id": {
"type": "keyword"
},
"name": {
"type": "keyword"
}
}
}
}
}
}
}
}
}
Loading