You are tasked with creating a metric filter to track instances where the CPU utilization exceeds 85%.
{ $.cpu_utilization > 85 }
{ $.CPU > 85 }
{ $.utilization > 85 }
{ $.cpu_utilization > 85 }
Show answer and explanation
Correct answer: { $.cpu_utilization > 85 }
Why "Create a metric filter using the pattern { $.cpu_utilization > 85 }"?
In CloudWatch Logs, metric filters use JSON syntax to extract and match specific log entries. The correct pattern to match logs for CPU utilization should use the field name “cpuutilization” that is typically logged by AWS, followed by the condition (> 85) to monitor CPU usage exceeding 85%. The syntax for referring to the field is
$.<field_name>. Therefore, `$.cpuutilization > 85` is the correct syntax.Incorrect Options:
- { $.CPU > 85 }:
While this may seem correct, AWS logs may not use “CPU” as the field name. The correct field is typically “cpu_utilization.” Using “CPU” may not match any log data, leading to incorrect results. - { $.utilization > 85 }:
Similar to the previous option, “utilization” may not be the correct field name in the logs. Using this pattern could result in failing to match the desired logs. - { $.cpu_utilization > 85 }:
This is the correct pattern. The field “cpu_utilization” is common in CloudWatch logs for tracking CPU metrics. It ensures you match the logs where CPU usage exceeds 85%.