Amazon CloudWatch Metric Streams

Dynatrace integration with Amazon CloudWatch Metric Streams provides a simple and safe way to ingest AWS metrics. Amazon CloudWatch Metric Streams allows all metrics issued in a given AWS region to be streamed through Firehose to the Dynatrace API.

AWS default integration vs AWS Metric Streams

Differences between AWS default integration and AWS Metric Streams.

AWS Default integration
AWS Metric Streams
ActiveGate
Required for non-built-in services or monitored environments bigger than 2000 instances️
Not required
Firehose
Not required
Required
Dynatrace tenant open to incoming HTTPS Internet traffic
Not required
Required
Available metrics
Selected Amazon CloudWatch metrics️
All available Amazon CloudWatch metrics️
Metrics selection
In Dynatrace️
In Amazon CloudWatch console️
Metrics selection scope
Monitored metrics selection possible at the level of a single metric and its statistics️
Monitored metrics selection possible only at the level of the whole namespace️
Metrics key prefix
ext:cloud.aws.<service>️
cloud.aws.<service>️
Topology attributes (Dynatrace Entities)
Available
Available once the AWS Entities for Metric Streaming extension is enabled
Tags
(Dynatrace Entities)
Available
Not available
Predefined alerts
Available
Not available
Predefined dashboards
Available
Available
PrivateLink support
Not available
Not available

Prerequisites

  • Create an API token in your Dynatrace environment and enable the Ingest metrics permission.
  • Determine the API URL for your environment:
    • For Dynatrace SaaS
      https://<your_environment_ID>.live.dynatrace.com
    • For Dynatrace Managed
      https://<your_domain>/e/<your_environment_ID>
    • For ActiveGate
      https://<your_active_gate_IP_or_hostname>:9999/e/<your_environment_ID>

To determine <your_environment_ID>, see environment ID.

To receive the AWS metrics, the previously selected endpoint needs to be open to incoming Internet traffic. Restrictive firewalls might block the streaming service.

Set up a Metric Streams client

You can set up a Metric Streams client with a CloudFormation template or in the AWS console. See below for instructions.

CloudFormation allows you to deploy a Metric Streams client using a single deployment command to create a stack that groups multiple AWS resources. This approach is faster and makes AWS resource management easier.

You need one client stack for each region you want to monitor. Once deployed, the client starts streaming all metrics produced in its region. You can restrict which metrics are streamed.

Deploy the Metric Streams client for a default region

To fetch the CloudFormation template and deploy it to your AWS account, run the command below. Be sure to replace <your_API_URL> and <your_API_token> with your own values. Consult the parameters table that follows for details.

If you have AWS CLI configured, you can use a Bash-compliant shell. Otherwise, you can use CloudShell, which is available in the AWS console.

Parameter
Description
Default value
DYNATRACE_ENV_URL
required Your API URL. See Prerequisites for instructions.
DYNATRACE_API_KEY
required Your API token. See Prerequisites for instructions.
STACK_NAME
required The name of your client stack.
dynatrace-aws-metric-streams-client
REQUIRE_VALID_CERTIFICATE
optional If set to true, Dynatrace verifies the SSL certificate of your Dynatrace environment URL.
true
DELIVERY_ENDPOINT
optional One of these Metric Streams endpoints for Dynatrace:
Global: https://aws.cloud.dynatrace.com/
US: https://us.aws.cloud.dynatrace.com/
EU: https://eu.aws.cloud.dynatrace.com/
https://aws.cloud.dynatrace.com/
DYNATRACE_ENV_URL=<your_API_URL>
DYNATRACE_API_KEY=<your_API_token>
STACK_NAME=dynatrace-aws-metric-streams-client
DELIVERY_ENDPOINT=https://aws.cloud.dynatrace.com/
REQUIRE_VALID_CERTIFICATE=true


wget -O dynatrace-aws-metric-streams-client.yaml  https://assets.cloud.dynatrace.com/awsmetricstreaming/dynatrace-aws-metric-streams-client.yaml && \
 aws cloudformation deploy --capabilities CAPABILITY_NAMED_IAM --template-file ./dynatrace-aws-metric-streams-client.yaml --stack-name $STACK_NAME --parameter-overrides DynatraceEnvironmentUrl=$DYNATRACE_ENV_URL DynatraceApiKey=$DYNATRACE_API_KEY RequireValidCertificate=$REQUIRE_VALID_CERTIFICATE FirehoseHttpDeliveryEndpoint=$DELIVERY_ENDPOINT

Deploy the Metric Streams client for other regions

The command above uses the default AWS CLI profile and its default region. To change the profile and region, you can export additional variables such as AWS_DEFAULT_REGION and AWS_PROFILE and rerun the deployment command. If you are using CloudShell, you can change the region in the AWS console instead. For details on how to configure the AWS CLI, see Environment variables to configure the AWS CLI.

Monitor multiple AWS accounts with Cross-account cross-Region CloudWatch

To monitor metrics from linked AWS accounts using one AWS Metric Streams integration, you need to set IncludeLinkedAccountsMetrics parameter to true in the CloudFormation template.

Confirm that the Metric Streams client was deployed correctly optional

To ensure that the Metric Streams client was deployed correctly

  1. In the AWS console, go to CloudFormation.
  2. Select the stack you created in the CloudFormation deployment.
  3. On the Events tab, make sure all events completed successfully and there are no failed events.
  4. In Parameters tab, make sure all parameters you provided have correct values.

Restrict which metrics are streamed

If you want to restrict which metrics are streamed

  1. In the AWS console, go to CloudFormation.
  2. Select the stack you created in the CloudFormation deployment.
  3. On the Resources tab, find the resource with type AWS::CloudWatch::MetricStream and note its Physical ID.
  4. Go to CloudWatch.
  5. Under Metrics, select Streams.
  6. In the list of metric streams, select the one whose Name corresponds to the Physical ID that you noted in step 3 and then select Edit.
  7. Under Metrics to be streamed, select one of the following options:
    • All namespaces, if you want to automatically stream all namespaces (you can manually select namespaces to exclude).
    • Selected namespaces, if you want to manually select the namespaces to stream.
  8. Under Select metrics for the metric stream, select one of the following options:
    • All metrics, if you want to automatically stream all metrics from namespaces selected in step 7.
    • Exclude metrics by metric name, if you want to manually exclude metrics for each namespace.
  9. Select Save changes.

View metrics using preset dashboards

Once you deploy the Metric Streams client, you can use the predefined dashboards from the GitHub repository in Dynatrace to visualize your ingested data.

Prerequisites
  • Install Python 3 (no additional libraries are required)
  • Enable the Read configuration and Write configuration permissions for your API token

To upload preset dashboards from GitHub

  1. Get upload_dashboards.py from the GitHub repository.
curl -o upload_dashboards.py https://raw.githubusercontent.com/Dynatrace/snippets/master/product/dashboarding/upload_dashboards.py

  1. Create a dashboards directory next to upload_dashboards.py.

  2. Add any dashboard definition from GitHub to your dashboards directory.

    Each dashboard definition is a single JSON file located in the folders of the GitHub repository.

  3. Run the script below. Be sure to replace <your_dynatrace_cluster_version>, <your_API_token>, and <your_API_URL> with your own values. Consult the parameters table that follows for details.

Parameter
Description
cluster-version
The minor version of your Dynatrace Cluster. For instance, for version 1.210.1.xxxxx, you need to provide 210.
dynatrace-api-token
Your API token. See Prerequisites for instructions.
dynatrace-env-url
Your API URL. See Prerequisites for instructions.
python3 upload_dashboards.py --cluster-version <your_dynatrace_cluster_version> --dynatrace-api-token <your_API_token> --dynatrace-env-url <your_API_URL>

Example command

python3 upload_dashboards.py --cluster-version 206 --dynatrace-api-token 123456789 --dynatrace-env-url https://my-cluster.com/e/1755ddb2-7938-41a2-b6bd-096e0fdcd3e0

Uninstall the Metric Streams client

If you deployed the Metric Streams client with a CloudFormation template

  1. In the AWS console, go to CloudFormation.
  2. Select the stack you created in the CloudFormation deployment.
  3. In Resources, find the resource with type AWS::S3::Bucket, select its link, and, in the S3 console, delete all objects in this bucket.
  4. Back in CloudFormation, in Stack information, select Delete.

If you deployed the Metric Streams client through the AWS console, delete all the resources you created (S3 bucket, Firehose delivery stream, CloudWatch metric stream).

Metric Streams limitations

A metric won't be streamed if it is more than two hours old. You can determine a metric's age by graphing it in the CloudWatch console and checking the age of the last datapoint displayed.

For more limitations, see Amazon CloudWatch troubleshooting page

Related topics