CloudWatch エージェントを利用して、ネットワークパフォーマンスメトリクスを取得してみた 【Linux 編】

$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute
       valid_lft forever preferred_lft forever
2: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9001 qdisc mq state UP group default qlen 1000
    link/ether 0a:c5:7b:d2:49:fd brd ff:ff:ff:ff:ff:ff
    altname enp0s5
    altname eni-0e5c42eed6d349837
    altname device-number-0.0
    inet 10.0.22.9/20 metric 512 brd 10.0.31.255 scope global dynamic ens5
       valid_lft 2940sec preferred_lft 2940sec
    inet6 fe80::8c5:7bff:fed2:49fd/64 scope link proto kernel_ll
       valid_lft forever preferred_lft forever

$ modinfo ena
filename:       /lib/modules/6.1.129-138.220.amzn2023.x86_64/kernel/drivers/amazon/net/ena/ena.ko
version:        2.13.2g
license:        GPL
description:    Elastic Network Adapter (ENA)
author:         Amazon.com, Inc. or its affiliates
(略)

$ sudo yum install amazon-cloudwatch-agent -y

$ sudo vim /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.json

{
    "metrics": {
        "append_dimensions": {
            "InstanceId": "${aws:InstanceId}",
            "tag:Name": "${aws:tag:Name}"
        },
        "metrics_collected": {
            "ethtool": {
                "interface_include": [
                    "ens5"  ← メトリクスを収集するネットワークインターフェイス名を記載
                ],
                "metrics_include": [
                    "bw_in_allowance_exceeded",
                    "bw_out_allowance_exceeded",
                    "conntrack_allowance_exceeded",
                    "linklocal_allowance_exceeded",
                    "pps_allowance_exceeded",
                    "ena_srd_mode",
                    "ena_srd_tx_pkts",
                    "ena_srd_rx_pkts",
                    "ena_srd_resource_utilization"
                ]
            }
        }
    }
}

$ sudo /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-ctl -a fetch-config -m ec2 -s -c file:/opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.json

$ sudo systemctl status amazon-cloudwatch-agent

#!/bin/bash

# システムの更新
yum update -y

# CloudWatchエージェントのインストール
yum install -y amazon-cloudwatch-agent

# CloudWatchエージェント設定ファイルの作成
cat << 'EOF' > /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.json
{
    "metrics": {
        "append_dimensions": {
            "InstanceId": "${aws:InstanceId}",
            "tag:Name": "${aws:tag:Name}"
        },
        "metrics_collected": {
            "ethtool": {
                "interface_include": [
                    "ens5"
                ],
                "metrics_include": [
                    "bw_in_allowance_exceeded",
                    "bw_out_allowance_exceeded",
                    "conntrack_allowance_exceeded",
                    "linklocal_allowance_exceeded",
                    "pps_allowance_exceeded",
                    "ena_srd_mode",
                    "ena_srd_tx_pkts",
                    "ena_srd_rx_pkts",
                    "ena_srd_resource_utilization"
                ]
            }
        }
    }
}
EOF

# CloudWatchエージェントの起動と有効化
/opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-ctl -a fetch-config -m ec2 -s -c file:/opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.json
systemctl enable amazon-cloudwatch-agent
systemctl start amazon-cloudwatch-agent

# ログファイルの作成（トラブルシューティング用）
touch /var/log/cloudwatch-agent-setup.log

# セットアップ完了ログの記録
echo "CloudWatch Agent setup completed at $(date)" >> /var/log/cloudwatch-agent-setup.log

# セットアップ状態の確認とログ記録
systemctl status amazon-cloudwatch-agent >> /var/log/cloudwatch-agent-setup.log