云监控日志Grafana查询

Question

我正在从Cloud watch中获取日志到Grafana仪表板。

然而，我不能使它的面板或仪表板出它。

我尝试的是浏览、检查云监视日志并运行查询"fields @messages"

它将返回值

{
    "version": "0",
    "id": "sadfasdf-sdf-asfd-asdf-a3753e4aa9ae",
    "detail-type": "ECR",
    "source": "aws.ecr",
    "account": "12345",
    "time": "2020-23-29T02:36:48Z",
    "region": "us-east-1",
    "resources": [
        "arn:aws:ecr:us-east-1:XXXXXXXXXXX:repository/repo"
    ],
    "detail": {
        "scan-status": "COMPLETE",
        "repository-name": "my-repo",
        "finding-severity-counts": {
           "CRITICAL": 5,
           "MEDIUM": 3
         },
        "image-digest": "sha256:xxxxxxxxxxx",
        "image-tags": []
    }
}

因此，如何编写查询，可以列出以下详细信息在仪表板或面板。

"finding-severity-counts": {
               "CRITICAL": 5,
               "MEDIUM": 3
             },

我试过这样的东西

stats (detail.finding-severity-counts.CRITICAL) as severity 

但到目前为止，仪表板上没有显示任何东西。另外，我认为上面的一次只会显示CRITICAL的值，而不是中等。

提前感谢

Answer 1

你有没有试过在上面加上count？如下所示：

stats count(detail.finding-severity-counts.CRITICAL) as severity