Grafana 查询 cloudwatch 日志

Posted 2023-02-15

【中文标题】Grafana 查询 cloudwatch 日志

【英文标题】：Grafana query for cloud watch logs

【发布时间】：2021-09-09 03:10:03

【问题描述】：

我正在将日志从 Cloud watch 获取到 Grafana 仪表板。

但是我无法将其制成面板或仪表板。

我尝试的是去探索检查云观察日志并运行查询"fields @messages"

返回值

    "version": "0",
    "id": "sadfasdf-sdf-asfd-asdf-a3753e4aa9ae",
    "detail-type": "ECR",
    "source": "aws.ecr",
    "account": "12345",
    "time": "2020-23-29T02:36:48Z",
    "region": "us-east-1",
    "resources": [
        "arn:aws:ecr:us-east-1:XXXXXXXXXXX:repository/repo"
    ],
    "detail": 
        "scan-status": "COMPLETE",
        "repository-name": "my-repo",
        "finding-severity-counts": 
           "CRITICAL": 5,
           "MEDIUM": 3
         ,
        "image-digest": "sha256:xxxxxxxxxxx",
        "image-tags": []
    

那么如何编写可以在仪表板或面板中列出以下详细信息的查询。

"finding-severity-counts": 
               "CRITICAL": 5,
               "MEDIUM": 3
             ,

我试过类似的东西

stats (detail.finding-severity-counts.CRITICAL) as severity 

但到目前为止，仪表板没有显示任何内容。我也认为上面一次只会显示CRITICAL 值而不是中等。

提前致谢

【参考方案1】：

您是否尝试过添加计数？像这样：

stats count(detail.finding-severity-counts.CRITICAL) as severity