AWS S3 bucket by HTTP
Overview
The template to monitor AWS S3 bucket by HTTP via Zabbix that works without any external scripts. Most of the metrics are collected in one go, thanks to Zabbix bulk data collection. NOTE This template uses the GetMetricData CloudWatch API calls to list and retrieve metrics. For more information, please refer to the CloudWatch pricing page.
Additional information about metrics and used API methods:
- Full metrics list related to S3: https://docs.aws.amazon.com/AmazonS3/latest/userguide/metrics-dimensions.html
Requirements
Zabbix version: 7.0 and higher.
Tested versions
This template has been tested on:
- AWS S3 bucket by HTTP
Configuration
Zabbix should be configured according to the instructions in the Templates out of the box section.
Setup
The template gets AWS S3 metrics and uses the script item to make HTTP requests to the CloudWatch API.
Before using the template, you need to create an IAM policy for the Zabbix role in your AWS account with the necessary permissions.
Add the following required permissions to your Zabbix IAM policy in order to collect Amazon S3 metrics.
{
"Version":"2012-10-17",
"Statement":[
{
"Action":[
"cloudwatch:DescribeAlarms",
"cloudwatch:GetMetricData"
],
"Effect":"Allow",
"Resource":"*"
}
]
}
If you are using role-based authorization, set the appropriate permissions:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "iam:PassRole",
"Resource": "arn:aws:iam::<<--account-id-->>:role/<<--role_name-->>"
},
{
"Sid": "VisualEditor1",
"Effect": "Allow",
"Action": [
"cloudwatch:DescribeAlarms",
"cloudwatch:GetMetricData"
"ec2:AssociateIamInstanceProfile",
"ec2:ReplaceIamInstanceProfileAssociation"
],
"Resource": "*"
}
]
}
To gather Request metrics, enable Requests metrics on your Amazon S3 buckets from the AWS console.
You can also define a filter for the Request metrics using a shared prefix, object tag, or access point.
Set the macros "{$AWS.AUTH_TYPE}", "{$AWS.S3.BUCKET.NAME}"
If you are using access key-based authorization, set the following macros "{$AWS.ACCESS.KEY.ID}", "{$AWS.SECRET.ACCESS.KEY}"
For more information about manage access keys, see official documentation
Also, see the Macros section for a list of macros used for LLD filters.
Additional information about metrics and used API methods:
- Full metrics list related to S3: https://docs.aws.amazon.com/AmazonS3/latest/userguide/metrics-dimensions.html
Macros used
| Name | Description | Default |
|---|---|---|
| {$AWS.PROXY} | Sets HTTP proxy value. If this macro is empty then no proxy is used. |
|
| {$AWS.ACCESS.KEY.ID} | Access key ID. |
|
| {$AWS.SECRET.ACCESS.KEY} | Secret access key. |
|
| {$AWS.AUTH_TYPE} | Authorization method. Possible values: role_base, access_key. |
access_key |
| {$AWS.S3.BUCKET.NAME} | S3 bucket name. |
|
| {$AWS.S3.LLD.FILTER.ALARM_NAME.MATCHES} | Filter of discoverable alarms by name. |
.* |
| {$AWS.S3.LLD.FILTER.ALARM_NAME.NOT_MATCHES} | Filter to exclude discovered alarms by name. |
CHANGE_IF_NEEDED |
| {$AWS.S3.LLD.FILTER.ID.NAME.MATCHES} | Filter of discoverable request metrics by filter ID name. |
.* |
| {$AWS.S3.LLD.FILTER.ID.NAME.NOT_MATCHES} | Filter to exclude discovered request metrics by filter ID name. |
CHANGE_IF_NEEDED |
| {$AWS.S3.UPDATE.INTERVAL} | Interval in seconds for getting request metrics. Used in the metric configuration and in the JavaScript API query. Must be between 1 and 86400 seconds. |
1800 |
Items
| Name | Description | Type | Key and additional info |
|---|---|---|---|
| Get metrics data | Get bucket metrics. Full metrics list related to S3: https://docs.aws.amazon.com/AmazonS3/latest/userguide/metrics-dimensions.html |
Script | aws.s3.get_metrics Preprocessing
|
| Get alarms data | Get alarms data. DescribeAlarms API method: https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DescribeAlarms.html |
Script | aws.s3.get_alarms Preprocessing
|
| Get metrics check | Data collection check. |
Dependent item | aws.s3.metrics.check Preprocessing
|
| Get alarms check | Data collection check. |
Dependent item | aws.s3.alarms.check Preprocessing
|
| Bucket Size | This is a daily metric for the bucket. The amount of data in bytes stored in a bucket in the STANDARD storage class, INTELLIGENT_TIERING storage class, Standard-Infrequent Access (STANDARD_IA) storage class, OneZone-Infrequent Access (ONEZONE_IA), Reduced Redundancy Storage (RRS) class, S3 Glacier Instant Retrieval storage class, Deep Archive Storage (S3 Glacier Deep Archive) class, or S3 Glacier Flexible Retrieval (GLACIER) storage class. This value is calculated by summing the size of all objects and metadata in the bucket (both current and noncurrent objects), including the size of all parts for all incomplete multipart uploads to the bucket. |
Dependent item | aws.s3.bucket_size_bytes Preprocessing
|
| Number of objects | This is a daily metric for the bucket. The total number of objects stored in a bucket for all storage classes. This value is calculated by counting all objects in the bucket (both current and noncurrent objects) and the total number of parts for all incomplete multipart uploads to the bucket. |
Dependent item | aws.s3.number_of_objects Preprocessing
|
Triggers
| Name | Description | Expression | Severity | Dependencies and additional info |
|---|---|---|---|---|
| Failed to get metrics data | length(last(/AWS S3 bucket by HTTP/aws.s3.metrics.check))>0 |
Warning | ||
| Failed to get alarms data | length(last(/AWS S3 bucket by HTTP/aws.s3.alarms.check))>0 |
Warning |
LLD rule Bucket Alarms discovery
| Name | Description | Type | Key and additional info |
|---|---|---|---|
| Bucket Alarms discovery | Discovery of bucket alarms. |
Dependent item | aws.s3.alarms.discovery Preprocessing
|
Item prototypes for Bucket Alarms discovery
| Name | Description | Type | Key and additional info |
|---|---|---|---|
| [{#ALARM_NAME}]: State reason | An explanation for the alarm state, in text format. Alarm description: {#ALARM_DESCRIPTION} |
Dependent item | aws.s3.alarm.state_reason["{#ALARM_NAME}"] Preprocessing
|
| [{#ALARM_NAME}]: State | The state value for the alarm. Possible values: 0 (OK), 1 (INSUFFICIENT_DATA), 2 (ALARM). Alarm description: {#ALARM_DESCRIPTION} |
Dependent item | aws.s3.alarm.state["{#ALARM_NAME}"] Preprocessing
|
Trigger prototypes for Bucket Alarms discovery
| Name | Description | Expression | Severity | Dependencies and additional info |
|---|---|---|---|---|
| [{#ALARM_NAME}] has 'Alarm' state | Alarm "{#ALARM_NAME}" has 'Alarm' state. |
last(/AWS S3 bucket by HTTP/aws.s3.alarm.state["{#ALARM_NAME}"])=2 and length(last(/AWS S3 bucket by HTTP/aws.s3.alarm.state_reason["{#ALARM_NAME}"]))>0 |
Average | |
| [{#ALARM_NAME}] has 'Insufficient data' state | last(/AWS S3 bucket by HTTP/aws.s3.alarm.state["{#ALARM_NAME}"])=1 |
Info |
LLD rule Request Metrics discovery
| Name | Description | Type | Key and additional info |
|---|---|---|---|
| Request Metrics discovery | Discovery of request metrics. |
Dependent item | aws.s3.configuration.discovery Preprocessing
|
Item prototypes for Request Metrics discovery
| Name | Description | Type | Key and additional info |
|---|---|---|---|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Get request metrics | Get bucket request metrics filter: '{#AWS.S3.FILTER.ID.NAME}'. Full metrics list related to S3: https://docs.aws.amazon.com/AmazonS3/latest/userguide/metrics-dimensions.html |
Script | aws.s3.get_metrics["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: All | The total number of HTTP requests made to an Amazon S3 bucket, regardless of type. If you're using a metrics configuration with a filter, then this metric only returns the HTTP requests that meet the filter's requirements. |
Dependent item | aws.s3.all_requests["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Get | The number of HTTP GET requests made for objects in an Amazon S3 bucket. This doesn't include list operations. Paginated list-oriented requests, like List Multipart Uploads, List Parts, Get Bucket Object versions, and others, are not included in this metric. |
Dependent item | aws.s3.get_requests["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Put | The number of HTTP PUT requests made for objects in an Amazon S3 bucket. |
Dependent item | aws.s3.put_requests["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Delete | The number of HTTP DELETE requests made for objects in an Amazon S3 bucket. This also includes Delete Multiple Objects requests. This metric shows the number of requests, not the number of objects deleted. |
Dependent item | aws.s3.delete_requests["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Head | The number of HTTP HEAD requests made to an Amazon S3 bucket. |
Dependent item | aws.s3.head_requests["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Post | The number of HTTP POST requests made to an Amazon S3 bucket. Delete Multiple Objects and SELECT Object Content requests are not included in this metric. |
Dependent item | aws.s3.post_requests["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Select | The number of Amazon S3 SELECT Object Content requests made for objects in an Amazon S3 bucket. |
Dependent item | aws.s3.select_requests["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Select, bytes scanned | The number of bytes of data scanned with Amazon S3 SELECT Object Content requests in an Amazon S3 bucket. Statistic: Average (bytes per request). |
Dependent item | aws.s3.select_bytes_scanned["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Select, bytes returned | The number of bytes of data returned with Amazon S3 SELECT Object Content requests in an Amazon S3 bucket. Statistic: Average (bytes per request). |
Dependent item | aws.s3.select_bytes_returned["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: List | The number of HTTP requests that list the contents of a bucket. |
Dependent item | aws.s3.list_requests["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Bytes downloaded | The number of bytes downloaded for requests made to an Amazon S3 bucket, where the response includes a body. Statistic: Average (bytes per request). |
Dependent item | aws.s3.bytes_downloaded["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Bytes uploaded | The number of bytes uploaded that contain a request body, made to an Amazon S3 bucket. Statistic: Average (bytes per request). |
Dependent item | aws.s3.bytes_uploaded["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Errors, 4xx | The number of HTTP 4xx client error status code requests made to an Amazon S3 bucket with a value of either 0 or 1. The average statistic shows the error rate, and the sum statistic shows the count of that type of error, during each period. Statistic: Average (reports per request). |
Dependent item | aws.s3.4xx_errors["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Requests: Errors, 5xx | The number of HTTP 5xx server error status code requests made to an Amazon S3 bucket with a value of either 0 or 1. The average statistic shows the error rate, and the sum statistic shows the count of that type of error, during each period. Statistic: Average (reports per request). |
Dependent item | aws.s3.5xx_errors["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: First byte latency, avg | The per-request time from the complete request being received by an Amazon S3 bucket to when the response starts to be returned. Statistic: Average. |
Dependent item | aws.s3.first_byte_latency.avg["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: First byte latency, p90 | The per-request time from the complete request being received by an Amazon S3 bucket to when the response starts to be returned. Statistic: 90th percentile. |
Dependent item | aws.s3.first_byte_latency.p90["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Total request latency, avg | The elapsed per-request time from the first byte received to the last byte sent to an Amazon S3 bucket. This includes the time taken to receive the request body and send the response body, which is not included in FirstByteLatency. Statistic: Average. |
Dependent item | aws.s3.total_request_latency.avg["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Total request latency, p90 | The elapsed per-request time from the first byte received to the last byte sent to an Amazon S3 bucket. This includes the time taken to receive the request body and send the response body, which is not included in FirstByteLatency. Statistic: 90th percentile. |
Dependent item | aws.s3.total_request_latency.p90["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Replication: Latency | The maximum number of seconds by which the replication destination region is behind the source Region for a given replication rule. |
Dependent item | aws.s3.replication_latency["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Replication: Bytes pending | The total number of bytes of objects pending replication for a given replication rule. |
Dependent item | aws.s3.bytes_pending_replication["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
| Filter [{#AWS.S3.FILTER.ID.NAME}]: Replication: Operations pending | The number of operations pending replication for a given replication rule. |
Dependent item | aws.s3.operations_pending_replication["{#AWS.S3.FILTER.ID.NAME}"] Preprocessing
|
Feedback
Please report any issues with the template at https://support.zabbix.com
You can also provide feedback, discuss the template, or ask for help at ZABBIX forums
