Chat now with support
Chat mit Support

Foglight Hybrid Cloud Manager 1.9 - User Guide (for AWS environments)

Using Foglight Hybrid Cloud Manager for AWS Monitoring Tab System Info Tab Tags Tab Report Tab Rule Configuration Tab Administration Tab Optimizer Tab Cost Tab Policy Management Tab

API used to collect Cost metrics

Foglight Hybrid Cloud Manager for AWS uses the AWS Cost and Usage Report to tracks your AWS usage and provides the estimated charges associated with your AWS account. AWS delivers the AWS Cost & Usage Report (in CSV format) for the Amazon Simple Storage Service (S3) bucket you specified, and updates the reports at least once a day. AWS Agent retrieves the reports programmatically using the Amazon S3 APIs.

If you use the consolidated billing feature in AWS Organizations, this report is available only to the master account and includes activity for all the member accounts that are associated with the master account.

Refer to the AWS Cost and Usage Report for more details.

To get Account ID (12-digit number)
1
Log in to the AWS Management Console: https://console.aws.amazon.com.
2
Locate your Account ID
a
Click Support on the navigation bar on the upper-right.
b
Choose Support Center. Your currently signed-in account number (ID) appears in the Support Center title bar.
To create an AWS Cost and Usage Report
1
Sign in to the AWS Management Console and open the Billing and Cost Management console at https://console.aws.amazon.com/billing/.
2
On the navigation pane, choose Reports.
3
Choose Create report.
4
Type the following information, as needed, and then click Next.
a
Report name: enter the name of report.
b
Additional report details: select Include resource IDs.
5
S3 bucket: Enter the name of the Amazon S3 bucket where you want the reports to be delivered and then select Verify. The bucket must have appropriate permissions.
a
Click Sample Policy link and copy and paste the text in this sample policy into the permissions associated with your Amazon S3 bucket.
b
Open a new Page to access your S3 bucket, click Permissions and then Bucket policy. Paste the text in this sample policy into the permissions associated with your Amazon S3 bucket.
c
Below is an example for the S3 bucket policy. Update the following descriptions in bold according to your AWS Account and S3 bucket.
•
AWS monitoring user ARN (in line 32): "arn:aws:iam::88888888:user/exampleAWSUserTest":
Format: "arn:aws:iam::your AWS Account ID:user/your monitoring AWS username"
To get the AWS user ARN from AWS Console, select IAM, and then click the AWS user which is configured under the Foglight AWS Agent.
•
S3 bucket ARN (in line 15, 26, and 35): "arn:aws:s3:::exampleBucketNameTest":
Format: arn:aws:s3:::your bucket name
Change the exampleBucketNameTest to your S3 bucket name.
{
"Version": "2008-10-17",
"Id": "PolicyForFoglightAWSCostReport",
"Statement": [
{
"Sid": "StmtForAWSBillingReportGet",
"Effect": "Allow",
"Principal": {
"Service": "billingreports.amazonaws.com"
},
"Action": [
"s3:GetBucketAcl",
"s3:GetBucketPolicy"
],
"Resource": "arn:aws:s3:::exampleBucketNameTest"
},
{
"Sid": "StmtForAWSBillingReportPut",
"Effect": "Allow",
"Principal": {
"Service": "billingreports.amazonaws.com"
},
"Action": [
"s3:PutObject"
],
"Resource": "arn:aws:s3:::exampleBucketNameTest/*"
},
{
"Sid": "StmtForAWSUserGet",
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::88888888:user/exampleAWSUserTest"
},
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::exampleBucketNameTest/*"
}
]
}
6
Report path prefix - Optional: Enter the report path prefix that you want to name of your report.
7
Time granularity: Choose Daily.
8
Report versioning: Choose “Overwrite existing report”.
9
Enable report data integration for: Leave blank.
10
Compression type: Choose GZIP or ZIP
11
Click Next, after you have reviewed the settings for your report, choose Review and Complete.

AWS monitoring setup

A complete setup includes the following two steps:

1
Get the authentication information through AWS Management Console. For more information, see Getting authentication information through console.
2
Create an AWS Agent on the Foglight Management Server. For more information, see Creating an AWS Agent.
3
(Optional) Configure the interval of data collection. For more information, see Configuring data collection interval.

Getting authentication information through console

To create and retrieve a user’s Access Keys through the AWS IAM console:
1
Log in to the AWS IAM console at: https://console.aws.amazon.com/iam/.
2
Click IAM under the Security, Identity & Compliance column.
3
On the left navigation panel, click Users.
The Resource Groups view opens on the right.
4
In the Resource Groups view, click the user which Access Key is to be retrieved.
The User Summary view opens.
5
In the User Summary view, click Security credentials, then the Sign-in credentials view opens.
6
In the Access keys area, click Create access key.
The Create access key dialog box appears and shows the access key and Secret access key.
7
Click Download .csv file to keep the access key and secret access key somewhere safe.
8
(Optional) If you see the Limit exceed message, click the button next to the Status column to delete an access key that is not being used. Then repeat Step 6 to create and retrieve a new access key.

Creating an AWS Agent

To create an AWS agent:
1
Log in to the Foglight browser interface.
2
Ensure that the navigation panel is open.
To open the navigation panel, click the right-facing arrow on the left.
3
On the navigation panel, under Homes, click Cloud Manager.
The Cloud Manager dashboard opens.
4
In the Cloud Manager dashboard, click Administration, and then click Add or Create AWS Agent.
The Agent Setup Wizard dialog box opens.
5
In the Select Agent Host view, select the agent manager on which the new agent is to be deployed, and then click Next.
6
In the AWS Credential view, specify the following values, as needed, then click Finish.
•
Account Alias: The display name of this account.
•
Access Key ID: The access key retrieved in Getting authentication information through console.
•
Secret Access Key: The secret access key retrieved in Getting authentication information through console.
•
Collect Memory Metric: Select this option to enable the collection of instance memory metrics. The default value is disabled. Foglight supports to collect memory metrics for both Windows and Linux OS. To enable Linux OS Memory Metrics collection, upload the private key and assign the credential to the required instance. For how to upload private key and assign the credential to required instance, refer to To create user name and password for an instance: . No additional tasks are required when enabling Windows OS memory metrics collection.
•
Collect Linux Volume Utilization: Select this option to enable the collection of Linux volume utilization. The default value is disabled. Foglight only supports to collect volume utilization for Linux OS. To enable Linux OS Memory Metrics collection, upload the private key and assign the credential to the required instance. For how to upload private key and assign the credential to required instance, refer to To assign credentials for AWS instances: .
•
Specify an agent name (Optional): Specify the name of agent.
•
Configure regions to be monitored (Optional): Select AWS regions for monitoring. All regions will be monitored if this field is not configured.
•
Configure Account Cost to Monitor: Configure the Cost Metrics collection. Collections will start only after the AWS Cost and Usage Report are created on the AWS Console. See To create an AWS Cost and Usage Report. For more details, see Configure Account Cost to Monitor: .
•
Configure Proxy (Optional): Configure the proxy setting when the Agent Host requires a proxy connection to the Internet. For more details, see Configure Proxy (Optional): .

The new AWS Agent is created, and its data is to be displayed on the Monitoring tab after a few minutes.

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen