Splunk Observability - AWS instances list or GCP instances list

 

SignalFlow 에 아래와 같이 promote() 함수를 이용하여 정보를 수집한다.

A = data('^aws.ec2.cpu.utilization').promote('aws_account_id').promote('aws_architecture').promote('aws_arn').promote('aws_availability_zone').promote('aws_hypervisor').promote('aws_image_id').promote('aws_instance_id').promote('aws_instance_type').promote('aws_launch_time').promote('aws_private_dns_name').promote('aws_public_dns_name').promote('aws_public_ip_address').promote('aws_region').promote('aws_reservation_id').promote('aws_root_device_type').promote('aws_state').promote('aws_tag_Name').promote('AWSUniqueId').promote('InstanceId').promote('namespace').publish(label='A')

 

key 정보는 아래 내용을 참고해서 등록하면 된다.

 

아래와 같이 리스트를 뽑을 수 있고, csv로 export 할 수 있음.

 

GCP instance list

A = data('^aws.ec2.cpu.utilization').promote('aws_account_id').promote('aws_architecture').promote('aws_arn').promote('aws_availability_zone').promote('aws_hypervisor').promote('aws_image_id').promote('aws_instance_id').promote('aws_instance_type').promote('aws_launch_time').promote('aws_private_dns_name').promote('aws_public_dns_name').promote('aws_public_ip_address').promote('aws_region').promote('aws_reservation_id').promote('aws_root_device_type').promote('aws_state').promote('aws_tag_Name').promote('AWSUniqueId').promote('InstanceId').promote('namespace').publish(label='A')