Skip to content

Instantly share code, notes, and snippets.

@csereno

csereno/CW_Log_Metric_Filter_VPC_Flowlogs.md

Created February 1, 2019 22:50
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save csereno/0f7597c8c88e070c3292a8450e7c0c27 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save csereno/0f7597c8c88e070c3292a8450e7c0c27 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. csereno created this gist Feb 1, 2019.
    4 changes: 4 additions & 0 deletions CW_Log_Metric_Filter_VPC_Flowlogs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,4 @@
    # metric filter syntax
    <div>
    [version, account, eni, source, destination, srcport, destport="22", protocol="6", packets, bytes, windowstart, windowend, action="REJECT", flowlogstatus]
    </div>
    5 changes: 5 additions & 0 deletions CW_Log_Parse_VPC_Flowlogs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,5 @@
    # CW log parse syntax
    <div>
    parse @message '* * * * * * * * * * * * * *' as version, account, eni, source, destination, srcport, destport, protocol, packets, bytes, windowstart, windowend, action, flowlogstatus
    | stats avg(bytes), min(bytes), max(bytes) by source, destination
    </div>