无法在CloudWatch日志控制台中获取IIS。创建协会后

Question

我尝试使用aws CloudWatch分析IIS日志。我遵循了下面的链接[ https://aws.amazon.com/blogs/mt/automate-iis-and-httperr-logs-to-amazon-cloudwatch-using-ec2-systems-manager/ ]

步骤如下：

1. 设置配置json文件。

配置json文件：

{ "IsEnabled": true, "EngineConfiguration": { "PollInterval": "00:00:15", "Components": [ { "Id": "SystemEventLog", "FullName": "AWS.EC2.Windows.CloudWatch.EventLog.EventLogInputComponent,AWS.EC2.Windows.CloudWatch", "Parameters": { "LogName": "System", "Levels": "7" } }, { "Id": "SecurityEventLog", "FullName": "AWS.EC2.Windows.CloudWatch.EventLog.EventLogInputComponent,AWS.EC2.Windows.CloudWatch", "Parameters": { "LogName": "Security", "Levels": "7" } }, { "Id": "ETW", "FullName": "AWS.EC2.Windows.CloudWatch.EventLog.EventLogInputComponent,AWS.EC2.Windows.CloudWatch", "Parameters": { "LogName": "Microsoft-Windows-WinINet/Analytic", "Levels": "7" } }, { "Id": "IISLogs", "FullName": "AWS.EC2.Windows.CloudWatch.CustomLog.CustomLogInputComponent,AWS.EC2.Windows.CloudWatch", "Parameters": { "LogDirectoryPath": "C:\\inetpub\\logs\\LogFiles\\W3SVC1", "TimestampFormat": "yyyy-MM-dd HH:mm:ss", "Encoding": "UTF-8", "Filter": "", "CultureName": "en-US", "TimeZoneKind": "UTC", "LineCount": "3" } }, { "Id": "HttpErr", "FullName": "AWS.EC2.Windows.CloudWatch.CustomLog.CustomLogInputComponent,AWS.EC2.Windows.CloudWatch", "Parameters": { "LogDirectoryPath": "C:\\Windows\\System32\\LogFiles\\HTTPERR", "TimestampFormat": "yyyy-MM-dd HH:mm:ss", "Encoding": "UTF-8", "Filter": "", "CultureName": "en-US", "TimeZoneKind": "UTC", "LineCount": "3" } }, { "Id": "CustomLogs", "FullName": "AWS.EC2.Windows.CloudWatch.CustomLog.CustomLogInputComponent,AWS.EC2.Windows.CloudWatch", "Parameters": { "LogDirectoryPath": "C:\\CustomLogs\\", "TimestampFormat": "MM/dd/yyyy HH:mm:ss", "Encoding": "UTF-8", "Filter": "", "CultureName": "en-US", "TimeZoneKind": "Local" } }, { "Id": "PerformanceCounter", "FullName": "AWS.EC2.Windows.CloudWatch.PerformanceCounterComponent.PerformanceCounterInputComponent,AWS.EC2.Windows.CloudWatch", "Parameters": { "CategoryName": "Memory", "CounterName": "Available MBytes", "InstanceName": "", "MetricName": "Memory", "Unit": "Megabytes", "DimensionName": "", "DimensionValue": "" } }, { "Id": "IISCloudWatchLogs", "FullName": "AWS.EC2.Windows.CloudWatch.CloudWatchLogsOutput,AWS.EC2.Windows.CloudWatch", "Parameters": { "AccessKey": "---------------------------------", "SecretKey": "----------------------------------", "Region": "us-east-1a", "LogGroup": "RWEBAPP-SERVER", "LogStream": "used our instance id" } }, { "Id": "HttpErrCloudWatchLogs", "FullName": "AWS.EC2.Windows.CloudWatch.CloudWatchLogsOutput,AWS.EC2.Windows.CloudWatch", "Parameters": { "AccessKey": "-----------------------------------------", "SecretKey": "-----------------------------------------", "Region": "us-east-1a", "LogGroup": "RckWebServer", "LogStream": "used our instance id-httpErr" } }, { "Id": "CloudWatch", "FullName": "AWS.EC2.Windows.CloudWatch.CloudWatch.CloudWatchOutputComponent,AWS.EC2.Windows.CloudWatch", "Parameters": { "AccessKey": "------------------------------", "SecretKey": "------------------------------", "Region": "us-east-1a", "NameSpace": "Windows/Default" } } ], "Flows": { "Flows": [ "IISLogs,IISCloudWatchLogs", "HttpErrLogs,HttpCloudWatchLogs" ] } } }

1. 然后，配置与CloudWatch的集成。协会是成功创建的。
2. 无法在云监视日志控制台.中看到日志组。4.检查了此文件路径C:/ProgramData/Amazon/SSM/Logs中的错误日志

错误日志：

2018-11:12 11:20:06,055 1信息框架-无法创建组件，因为配置缺少HttpErrLogs，基于该组件的工作流程将不会启动。2018-11:12 11:20:06,077 1信息框架-无法创建组件，因为配置缺少HttpCloudWatchLogs，基于该组件的工作流程将不会启动。2018-11:12 11:20:06,077 1信息框架-无法创建组件，因为配置缺少HttpErrLogs，基于该组件的工作流程将不会启动。2018-11-12 11:20:06,077 1错误框架-工作流创建失败:无法创建组件ID HttpErrLogs。请验证工作流中的组件是否在配置中定义。2018-11:12 11:20:06,077 1错误框架-无法用提供的配置设置初始化CloudWatch插件。2018-11-12 11:20:06,077 1错误框架- aws:cloudWatch插件引发异常。AWS.EC2.Windows.CloudWatch.CloudwatchConfigurationException:无法使用所提供的配置设置初始化CloudWatch插件。工作流创建失败:无法创建组件ID HttpErrLogs。请验证工作流中的组件是否在配置中定义。

在AWS.EC2.Windows.CloudWatch.Host.Configure(String配置( Amazon.EC2Services.Config.Plugins.CloudWatch.CloudWatchPlugin.Apply(PluginApplyContext applyContext，PluginArgs pluginArgs) 2018-11:12 11:20:06,102 1 INFO框架- aws:cloudWatch插件配置验证2018-11-12 11:20:06,102 1 INFO aws:cloudWatch - CloudWatch执行开始。2018年-11:12 11:20:06,102 1 INFO aws:cloudWatch -启动CloudWatch插件-2018年-11-12 11:20:06,102 1错误aws:cloudWatch -主机未配置，不会将数据上传到CloudWatch

Answer 1

你的身份证和HttpErr不匹配

{
                "Id": "HttpErr",
                "FullName": "AWS.EC2.Windows.CloudWatch.CustomLog.CustomLogInputComponent,AWS.EC2.Windows.CloudWatch",
                "Parameters": {
                    "LogDirectoryPath": "C:\\Windows\\System32\\LogFiles\\HTTPERR",
                    "TimestampFormat": "yyyy-MM-dd HH:mm:ss",
                    "Encoding": "UTF-8",
                    "Filter": "",
                    "CultureName": "en-US",
                    "TimeZoneKind": "UTC",
                    "LineCount": "3"
                }
            }

但是在您的流中使用HttpErrLogs

"Flows": {
            "Flows": [
                "IISLogs,IISCloudWatchLogs",
                "HttpErrLogs,HttpCloudWatchLogs"
            ]
        }