· 6 years ago · Feb 01, 2019, 03:50 AM
1If on Windows create the following file:
2 C:\Program Files\Amazon\SSM\Plugins\awsCloudWatch\AWS.EC2.Windows.CloudWatch.json
3
4with contents similar to this:
5
6{
7 "IsEnabled": true,
8 "EngineConfiguration": {
9 "Components": [
10 {
11 "FullName": "AWS.EC2.Windows.CloudWatch.EventLog.EventLogInputComponent,AWS.EC2.Windows.CloudWatch",
12 "Id": "EC2ConfigServiceEventLog",
13 "Parameters": {
14 "Levels": "4",
15 "LogName": "EC2ConfigService"
16 }
17 },
18 {
19 "FullName": "AWS.EC2.Windows.CloudWatch.EventLog.EventLogInputComponent,AWS.EC2.Windows.CloudWatch",
20 "Id": "ApplicationEventLog",
21 "Parameters": {
22 "Levels": "4",
23 "LogName": "Application"
24 }
25 },
26 {
27 "FullName": "AWS.EC2.Windows.CloudWatch.EventLog.EventLogInputComponent,AWS.EC2.Windows.CloudWatch",
28 "Id": "SystemEventLog",
29 "Parameters": {
30 "Levels": "7",
31 "LogName": "System"
32 }
33 },
34 {
35 "FullName": "AWS.EC2.Windows.CloudWatch.EventLog.EventLogInputComponent,AWS.EC2.Windows.CloudWatch",
36 "Id": "SecurityEventLog",
37 "Parameters": {
38 "Levels": "7",
39 "LogName": "Security"
40 }
41 },
42 {
43 "FullName": "AWS.EC2.Windows.CloudWatch.CustomLog.CustomLogInputComponent,AWS.EC2.Windows.CloudWatch",
44 "Id": "CustomLogs",
45 "Parameters": {
46 "LogDirectoryPath": "C:\\CustomLogs\\",
47 "TimestampFormat": "MM/dd/yyyy HH:mm:ss",
48 "Encoding": "UTF-8",
49 "Filter": "",
50 "CultureName": "en-US",
51 "TimeZoneKind": "Local",
52 "LineCount": "5"
53 }
54 },
55 {
56 "FullName": "AWS.EC2.Windows.CloudWatch.PerformanceCounterComponent.PerformanceCounterInputComponent,AWS.EC2.Windows.CloudWatch",
57 "Id": "PerformanceCounter",
58 "Parameters": {
59 "CategoryName": "Memory",
60 "CounterName": "Available MBytes",
61 "DimensionName": "InstanceId",
62 "DimensionValue": "{instance_id}",
63 "InstanceName": "",
64 "MetricName": "AvailableMemory",
65 "Unit": "Megabytes"
66 }
67 },
68 {
69 "FullName": "AWS.EC2.Windows.CloudWatch.CloudWatchLogsOutput,AWS.EC2.Windows.CloudWatch",
70 "Id": "CloudWatchLogs-System",
71 "Parameters": {
72 "AccessKey": "",
73 "LogGroup": "Windows/System",
74 "LogStream": "{instance_id}",
75 "Region": "ca-central-1",
76 "SecretKey": ""
77 }
78 },
79 {
80 "FullName": "AWS.EC2.Windows.CloudWatch.CloudWatchLogsOutput,AWS.EC2.Windows.CloudWatch",
81 "Id": "CloudWatchLogs-Application",
82 "Parameters": {
83 "AccessKey": "",
84 "LogGroup": "Windows/Application",
85 "LogStream": "{instance_id}",
86 "Region": "ca-central-1",
87 "SecretKey": ""
88 }
89 },
90 {
91 "FullName": "AWS.EC2.Windows.CloudWatch.CloudWatchLogsOutput,AWS.EC2.Windows.CloudWatch",
92 "Id": "CloudWatchLogs-Security",
93 "Parameters": {
94 "AccessKey": "",
95 "LogGroup": "Windows/Security",
96 "LogStream": "{instance_id}",
97 "Region": "ca-central-1",
98 "SecretKey": ""
99 }
100 },
101 {
102 "FullName": "AWS.EC2.Windows.CloudWatch.CloudWatchLogsOutput,AWS.EC2.Windows.CloudWatch",
103 "Id": "CloudWatchLogs-EC2config",
104 "Parameters": {
105 "AccessKey": "",
106 "LogGroup": "Windows/EC2Config",
107 "LogStream": "{instance_id}",
108 "Region": "ca-central-1",
109 "SecretKey": ""
110 }
111 },
112 {
113 "FullName": "AWS.EC2.Windows.CloudWatch.CloudWatchLogsOutput,AWS.EC2.Windows.CloudWatch",
114 "Id": "CloudWatchLogs-CustomLogs",
115 "Parameters": {
116 "AccessKey": "",
117 "LogGroup": "Windows/CustomLogs",
118 "LogStream": "{instance_id}",
119 "Region": "ca-central-1",
120 "SecretKey": ""
121 }
122 },
123 {
124 "FullName": "AWS.EC2.Windows.CloudWatch.PerformanceCounterComponent.PerformanceCounterInputComponent,AWS.EC2.Windows.CloudWatch",
125 "Id": "PerformanceCounterDiskC",
126 "Parameters": {
127 "CategoryName": "LogicalDisk",
128 "CounterName": "% Free Space",
129 "DimensionName": "InstanceId",
130 "DimensionValue": "{instance_id}",
131 "InstanceName": "C:",
132 "MetricName": "C.FreeDiskPercent",
133 "Unit": "Percent"
134 }
135 },
136 {
137 "FullName": "AWS.EC2.Windows.CloudWatch.CloudWatch.CloudWatchOutputComponent,AWS.EC2.Windows.CloudWatch",
138 "Id": "CloudWatch",
139 "Parameters": {
140 "AccessKey": "",
141 "NameSpace": "Windows/Default",
142 "Region": "ca-central-1",
143 "SecretKey": ""
144 }
145 }
146 ],
147 "Flows": {
148 "Flows": [
149 "(EC2ConfigServiceEventLog),CloudWatchLogs-EC2Config",
150 "(SystemEventLog),CloudWatchLogs-System",
151 "(SecurityEventLog),CloudWatchLogs-Security",
152 "(ApplicationEventLog),CloudWatchLogs-Application",
153 "(CustomLogs),CloudWatchLogs-CustomLogs",
154 "(PerformanceCounter,PerformanceCounterDiskC),CloudWatch"
155 ]
156 },
157 "PollInterval": "00:00:15"
158 }
159}
160
161then restart the AmazonSSMAgent windows service