2016-11-30 54 views
0

我希望有人可以幫助解決這個問題,我試圖從安裝了EC2config服務的Windows Server 2012流式傳輸日誌。EC2Config Cloudwatch日誌流式傳輸不起作用

我一直遵守以下文件: https://aws.amazon.com/blogs/devops/using-cloudwatch-logs-with-amazon-ec2-running-microsoft-windows-server/

遺憾的是沒有被分流到CloudWatch的日誌。

這裏是我使用的JSON:

{ 
"EngineConfiguration": { 
    "PollInterval": "00:00:15", 
    "Components": [ 
     { 
      "Id": "ApplicationEventLog", 
      "FullName": "AWS.EC2.Windows.CloudWatch.EventLog.EventLogInputComponent,AWS.EC2.Windows.CloudWatch", 
      "Parameters": { 
       "LogName": "Application", 
       "Levels": "1" 
      } 
     }, 
     { 
      "Id": "SystemEventLog", 
      "FullName": "AWS.EC2.Windows.CloudWatch.EventLog.EventLogInputComponent,AWS.EC2.Windows.CloudWatch", 
      "Parameters": { 
       "LogName": "System", 
       "Levels": "7" 
      } 
     }, 
     { 
      "Id": "SecurityEventLog", 
      "FullName": "AWS.EC2.Windows.CloudWatch.EventLog.EventLogInputComponent,AWS.EC2.Windows.CloudWatch", 
      "Parameters": { 
      "LogName": "Security", 
      "Levels": "7" 
      } 
     }, 
     { 
      "Id": "ETW", 
      "FullName": "AWS.EC2.Windows.CloudWatch.EventLog.EventLogInputComponent,AWS.EC2.Windows.CloudWatch", 
      "Parameters": { 
       "LogName": "Microsoft-Windows-WinINet/Analytic", 
       "Levels": "7" 
      } 
     }, 
     { 
      "Id": "IISLog", 
      "FullName": "AWS.EC2.Windows.CloudWatch.IISLogOutput,AWS.EC2.Windows.CloudWatch", 
      "Parameters": { 
     "LogDirectoryPath": "C:\\inetpub\\logs\\LogFiles\\W3SVC1" 
     "AccessKey": "", 
     "SecretKey": "", 
     "Region": "eu-west-1", 
     "LogGroup": "Web-Logs", 
     "LogStream": "IIStest" 
      } 
     }, 
     { 
      "Id": "CustomLogs", 
      "FullName": "AWS.EC2.Windows.CloudWatch.CustomLog.CustomLogInputComponent,AWS.EC2.Windows.CloudWatch", 
      "Parameters": { 
       "LogDirectoryPath": "C:\\CustomLogs\\", 
       "TimestampFormat": "MM/dd/yyyy HH:mm:ss", 
       "Encoding": "UTF-8", 
       "Filter": "", 
       "CultureName": "en-US", 
       "TimeZoneKind": "Local" 
      } 
     }, 
     { 
      "Id": "PerformanceCounter", 
      "FullName": "AWS.EC2.Windows.CloudWatch.PerformanceCounterComponent.PerformanceCounterInputComponent,AWS.EC2.Windows.CloudWatch", 
      "Parameters": { 
       "CategoryName": "Memory", 
       "CounterName": "Available MBytes", 
       "InstanceName": "", 
       "MetricName": "Memory", 
       "Unit": "Megabytes", 
       "DimensionName": "", 
       "DimensionValue": "" 
      } 
     }, 
     { 
      "Id": "CloudWatchLogs", 
      "FullName": "AWS.EC2.Windows.CloudWatch.CloudWatchLogsOutput,AWS.EC2.Windows.CloudWatch", 
      "Parameters": { 
       "AccessKey": "", 
       "SecretKey": "", 
       "Region": "eu-west-1", 
       "LogGroup": "Win2Test", 
       "LogStream": "logging-test" 
      } 
     }, 
     { 
      "Id": "CloudWatch", 
      "FullName": "AWS.EC2.Windows.CloudWatch.CloudWatch.CloudWatchOutputComponent,AWS.EC2.Windows.CloudWatch", 
      "Parameters": 
      { 
       "AccessKey": "", 
       "SecretKey": "", 
       "Region": "eu-west-1", 
       "NameSpace": "Windows/Default" 
      } 
     } 
    ], 
    "Flows": { 
     "Flows": 
     [ 
      "(ApplicationEventLog,SystemEventLog),CloudWatchLogs", 
    "IISLog" 
     ] 
    } 
} 
} 

在這個時刻我只想流IIS日誌,從我的理解CloudWatch的日誌組和流應該自動創建。

+0

您的實例確實有通過角色授予其訪問雲鐘錶集團/ S3桶進行記錄實例的個人資料? –

回答

0

看起來我在JSON文件本身,特別是FLOW區域犯了一些錯誤。

得到這個工作現在:)

+1

你有什麼可能更具體? –