CloudWatch Metrics

Setup AWS Kinesis Firehose

• Go to the Kinesis Firehose AWS console and create a new delivery stream.

  • Select Direct PUT as the source

  • Select HTTP Endpoint as the destination

  • In the destination settings, use the external facing endpoint of the Kfuse cluster and provide the following URL. https://<external facing endpoint of Kfuse cluster>/ingester/kinesis/metrics

  • Optionally use the “access token key” if needed.

  • In the Content encoding section, select GZIP

  • Provide an existing S3 bucket or create a new one for storing Kinesis records as a backup. The default of only backing up failed data should suffice.

  • Change the name of the stream if necessary.

Setup AWS CloudWatch Metrics Stream

• Go to the Cloudwatch AWS console

• On the Metrics section on the left side of the console, select Streams and create a metric stream

  • Select the metric namespaces to send to the stream (default is all metrics)

  • In the configuration section, Select an existing Firehose owned by your account and select the previously created Kinesis Firehose.

  • Under Change Output Format Make sure to select JSON for the output format. Kfuse currently only supports JSON format.

  • Change the name of the stream if necessary.

Enable AutoScaling Group Metrics

• Open the Amazon EC2 console at https://console.aws.amazon.com/ec2/, and choose Auto Scaling Groups from the navigation pane.

• Select the check box next to your Auto Scaling group.

• A split pane opens up at the bottom of the page.

• On the Monitoring tab, select the Auto Scaling group metrics collection, Enable the check box located at the top of the page under Auto Scaling.

Enable Collection of Request Metrics in S3

• Follow the instructions to enable the collection of request metrics for S3:

• https://docs.aws.amazon.com/AmazonS3/latest/userguide/configure-request-metrics-bucket.html

Enable Enrichment of AWS Metrics

The metrics sent by AWS CloudWatch to the Kinesis Firehose only include minimal labels. Kloudfuse supports attaching more labels (and also user-defined custom tags from the AWS console) to the ingested metrics. This is done by scraping AWS.

To enable enrichment of AWS metrics, follow these steps:

1. add the following configuration in the global section of the custom values.yaml

2. Since Kfuse needs to scrape the additional labels from AWS to attach to the metrics, Kfuse requires a policy with the following permissions:

4. The node-group (Node IAM Role ARN), in which Kloudfuse is running on, also needs to have the trust relationship as below (add .

Do a helm upgrade for changes to take affect

CloudWatch Logs

Setup AWS Kinesis Firehose

Note that a different Firehose is needed for logs.

• Go to the Kinesis Firehose AWS console and create a new delivery stream.

  • Select Direct PUT as the source

  • Select HTTP Endpoint as the destination

  • In the destination settings, use the external facing endpoint of the Kfuse cluster and provide the following URL. https://<external facing endpoint of Kfuse cluster>/ingester/kinesis/logs

  • Optionally use the “access token key” if needed

  • In the Content encoding section, select GZIP

  • Provide an existing S3 bucket or create a new one for storing Kinesis records as a backup. The default of only backing up failed data should suffice.
    
    

Create IAM Role to allow CloudWatch Logs to write to Kinesis Firehose

• Go the IAM AWS Console

• Go to Roles and select Create Role

  • Select Custom Trust Policy and Add the following (replace the region and AWS account accordingly):

     

  • Click Next to go to Add Permissions page and select Create Policy (This will open a new window).

    • Select JSON and add the following (Note the following allows all firehose in the same account. Adjust accordingly if only adding permission to a specific firehose):

       

  • Go back to the roles page and select the created permissions policy. Click “Create Role”.

  • Name and create the new role.
    
    

Setup CloudWatch logs subscriptions

• Go to the Cloudwatch AWS console

• On the Logs section on the left side of the console, select Log Groups

  • Go to the Log group that will be sent to the Kinesis Firehose.

  • Go to Actions → Subscription Filters → Create Kinesis Firehose subscription filter

    • In the Kinesis Firehose delivery stream section, select the previously created Kinesis Firehose for Logs.

    • In the Grant Permission section, select the previously created role.

    • Provide a Subscription filter pattern (or leave it blank if streaming everything)

    • Provide Subscription filter name (required step, can be anything)

    • Select Start Streaming

Cloudtrail events as logs

• There is an option to get the Cloudtrail events as logs and ingested by Kloudfuse. Please refer to and you can add a CloudWatch logs subscription for the log group as described above.

Supported AWS Component

AWS Namespaces