Skip to main content

Configure AWS Observability Alerts

Sumo Logic has provided out-of-the-box alerts to help you quickly determine if a particular AWS service is available and performing as expected. These alerts are built based on metrics datasets and have preset thresholds based on industry best practices and recommendations from AWS. These are built for every AWS service that is part of the AWS Observability solution and are installed via installation of CloudFormation template.

Once you have installed the AWS Observability solution with the option to “Install Dashboards and Alerts”, navigate to the AWS Observability folder under Monitors to configure them. 

install

To enable the monitors you want to alert on, follow the procedure in the documentation and to configure each alert to send notifications to other teams or connections please see the instructions detailed in Step 4 of this document

Sumo Logic provides the following out-of-the-box alerts:

Alert NameAlert DescriptionAlert ConditionRecover Condition
AWS API Gateway - High Integration LatencyThis alert fires when we detect that the average integration latency for a given API Gateway is greater than or equal to one second for 5 minutes.>= 1000\< 1000
AWS API Gateway - High LatencyThis alert fires when we detect that the average latency for a given API Gateway is greater than or equal to one second for 5 minutes.\>= 1000\< 1000
AWS API Gateway - High 4XX ErrorsThis alert fires when there are too many HTTP requests (>5%) with a response status of 4xx within an interval of 5 minutes.>= 5\< 5
AWS API Gateway - High 5XX ErrorsThis alert fires when there are too many HTTP requests (>5%) with a response status of 5xx within an interval of 5 minutes.>= 5\< 5
Amazon RDS - High CPU UtilizationThis alert fires when we detect that the average CPU utilization for a database is high (>=85%) for an interval of 5 minutes.>= 85\< 85
Amazon RDS - High Disk Queue DepthThis alert fires when the average disk queue depth for a database is high (>=5) for an interval of 5 minutes. Higher this value, higher will be the number of outstanding I/Os (read/write requests) waiting to access the disk, which will impact the performance of your application.>= 5\< 5
Amazon RDS - High Read LatencyThis alert fires when the average read latency of a database within a 5 minutes time interval is high (>=5 seconds). High read latency will affect the performance of your application.>= 5\< 5
Amazon RDS - High Write LatencyThis alert fires when the average write latency of a database within a 5 minute interval is high (>=5 seconds) . High write latencies will affect the performance of your application.>= 5\< 5
Amazon RDS - Low Burst BalanceThis alert fires when we observe a low burst balance (\<= 50%) for a given database. A low burst balance indicates you won't be able to scale up as fast for burstable database workloads on gp2 volumes.\<= 50\> 50
Amazon RDS - Low Aurora Buffer Cache Hit RatioThis alert fires when the average RDS Aurora buffer cache hit ratio within a 5 minute interval is low (\<= 50%). This indicates that a lower percentage of requests were served by the buffer cache, which could further indicate a degradation in application performance.\<= 50\> 50
AWS DynamoDB - High Account Provisioned Read CapacityThis alert fires when we detect that the average read capacity provisioned for an account for a time interval of 5 minutes is greater than or equal to 80%. High values indicate requests to the database are being throttled, which could further indicate that your application may not be working as intended.>= 80\< 80
AWS DynamoDB - High Account Provisioned Write CapacityThis alert fires when we detect that the average write capacity provisioned for an account for a time interval of 5 minutes is greater than or equal to 80%. High values indicate requests to the database are being throttled, which could further indicate that your application may not be working as intended.\>= 80\< 80
AWS DynamoDB - High Max Provisioned Table Read CapacityThis alert fires when we detect that the average percentage of read provisioned capacity used by the highest read provisioned table of an account for a time interval of 5 minutes is greater than or equal to 80%. High values indicate requests to the database are being throttled, which could further indicate that your application may not be working as intended.\>= 80\< 80
AWS DynamoDB - High Max Provisioned Table Write CapacityThis alert fires when we detect that the average percentage of write provisioned capacity used by the highest write provisioned table of an account for a time interval of 5 minutes is greater than or equal to 80%. High values indicate requests to the database are being throttled, which could further indicate that your application may not be working as intended.\>= 80\< 80
AWS Application Load Balancer - High LatencyThis alert fires when we detect that the average latency for a given Application load balancer within a time interval of 5 minutes is greater than or equal to three seconds.\>= 3000\< 3000
AWS Application Load Balancer - High 4XX ErrorsThis alert fires when there are too many HTTP requests (>5%) with a response status of 4xx within an interval of 5 minutes.>= 5\< 5
AWS Application Load Balancer - High 5XX ErrorsThis alert fires when there are too many HTTP requests (>5%) with a response status of 5xx within an interval of 5 minutes.>= 5\< 5
AWS Lambda - Low Provisioned Concurrency UtilizationThis alert fires when the average provisioned concurrency utilization for 5 minutes is low (\<= 50%). This indicates low provisioned concurrency utilization efficiency.\<= 50\> 50
AWS Lambda - High Percentage of Failed RequestsThis alert fires when we detect a large number of failed Lambda requests >5%) within an interval of 5 minutes.>= 5\< 5
AWS EC2 - High System CPU UtilizationThis alert fires when the average system CPU utilization within a 5 minute interval for an EC2 instance is high (>=85%).>=85\<85
AWS EC2 - High Total CPU UtilizationThis alert fires when the average total CPU utilization within a 5 minute interval for an EC2 instance is high (>=85%).>=85\<85
AWS EC2 - High Memory UtilizationThis alert fires when the average memory utilization within a 5 minute interval for an EC2 instance is high (>=85%).>= 85\< 85
AWS EC2 - High Disk UtilizationThis alert fires when the average disk utilization within a 5 minute time interval for an EC2 instance is high (>=85%).>= 85\< 85
Amazon ECS - High CPU UtilizationThis alert fires when the average CPU utilization within a 5 minute interval for a service within a cluster is high (>=85%).>= 85\< 85
Amazon ECS - High Memory UtilizationThis alert fires when the average memory utilization within a 5 minute interval for a service within a cluster is high (>=85%).>= 85\< 85
Amazon Elasticache - High CPU UtilizationThis alert fires when the average CPU utilization within a 5 minute interval for a host is high (>=90%). The CPUUtilization metric includes total CPU utilization across application, operating system and management processes. We highly recommend monitoring CPU utilization for hosts with two vCPUs or less.>= 90\< 90
Amazon Elasticache - High Engine CPU UtilizationThis alert fires when the average CPU utilization for the Redis engine process within a 5 minute interval is high (>=90%). For larger node types with four vCPUs or more, use the EngineCPUUtilization metric to monitor and set thresholds for scaling.>= 90\< 90
Amazon Elasticache - Low Redis Cache Hit RateThis alert fires when the average cache hit rate for Redis within a 5 minute interval is low (\<= 80%). This indicates low efficiency of the Redis instance. If cache ratio is lower than 80%, that indicates a significant amount of keys are either evicted, expired, or don't exist.\<= 80\> 80
Amazon Elasticache - High Redis Database Memory UsageThis alert fires when the average database memory usage within a 5 minute interval for the Redis engine is high >=95%). When the value reaches 100%, eviction may happen or write operations may fail based on ElastiCache policies thereby impacting application performance.>= 95\< 95
Amazon Elasticache - High Redis Memory Fragmentation RatioThis alert fires when the average Redis memory fragmentation ratio for within a 5 minute interval is high (>=1.5). Value equal to or greater than 1.5 Indicate significant memory fragmentation.>= 1.5\< 1.5
AWS Network Load Balancer - High TLS Negotiation ErrorsThis alert fires when we detect that there are too many TLS Negotiation Errors (>=10%) within an interval of 5 minutes for a given network load balancer>= 10\< 10
AWS Network Load Balancer - High Unhealthy HostsThis alert fires when we detect that are there are too many unhealthy hosts (>=10%) within an interval of 5 minutes for a given network load balancer>= 10\< 10
AWS Classic Load Balancer - High LatencyThis alert fires when we detect that the average latency for a given Classic load balancer within a time interval of 5 minutes is greater than or equal to three seconds.\>= 3000\< 3000
AWS Classic Load Balancer - High 4XX ErrorsThis alert fires when there are too many HTTP requests (>5%) with a response status of 4xx within an interval of 5 minutes.>= 5\< 5
AWS Classic Load Balancer - High 5XX ErrorsThis alert fires when there are too many HTTP requests (>5%) with a response status of 5xx within an interval of 5 minutes.>= 5\< 5
AWS Classic Load Balancer - Access from Highly Malicious SourcesThis alert fires when the Classic load balancer is accessed from highly malicious IP addresses within last 5 minutes.\> 0\< 0
AWS SNS - Failed NotificationsThis alert fires where there are many failed notifications (>2) within an interval of 5 minutes.>2<=2
AWS SNS - Access from Highly Malicious SourcesThis alert fires when an Application AWS - SNS is accessed from highly malicious IP addresses within last 5 minutes>0<=0
AWS SNS - Failed EventsThis alert fires when an SNS app has high number of failed events (>5) within last 5 minutes>5<=5
note

The information is provided for both Alert conditions and Recover conditions.

Sumo Logic YouTubeSumo Logic Twitter
Legal
Privacy Statement
Terms of Use

Copyright © 2022 by Sumo Logic, Inc.