• Home
  • Deploy Dynatrace
  • Set up Dynatrace on cloud platforms
  • Amazon Web Services
  • Integrations
  • Amazon Web Services
  • Amazon QLDB monitoring

Amazon QLDB monitoring

Dynatrace ingests metrics for multiple preselected namespaces, including Amazon QLDB. You can view graphs per service instance, with a set of dimensions, and create custom graphs that you can pin to your dashboards.

Prerequisites

To enable monitoring for this service, you need

  • ActiveGate version 1.197+, as follows:
    • For Dynatrace SaaS deployments, you need an Environment ActiveGate or a Multi-environment ActiveGate.
    • For Dynatrace Managed deployments, you can use any kind of ActiveGate.
      Note: For role-based access (whether in a SaaS or Managed deployment), you need an Environment ActiveGate installed on an Amazon EC2 host.
  • Dynatrace version 1.199+
  • An updated AWS monitoring policy to include the additional AWS services.
    To update the AWS IAM policy, use the JSON below, containing the monitoring policy (permissions) for all supporting services.
JSON predefined policy for all supporting services
json
{ "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": [ "acm-pca:ListCertificateAuthorities", "apigateway:GET", "apprunner:ListServices", "appstream:DescribeFleets", "appsync:ListGraphqlApis", "athena:ListWorkGroups", "autoscaling:DescribeAutoScalingGroups", "cloudformation:ListStackResources", "cloudfront:ListDistributions", "cloudhsm:DescribeClusters", "cloudsearch:DescribeDomains", "cloudwatch:GetMetricData", "cloudwatch:GetMetricStatistics", "cloudwatch:ListMetrics", "codebuild:ListProjects", "datasync:ListTasks", "dax:DescribeClusters", "directconnect:DescribeConnections", "dms:DescribeReplicationInstances", "dynamodb:ListTables", "dynamodb:ListTagsOfResource", "ec2:DescribeAvailabilityZones", "ec2:DescribeInstances", "ec2:DescribeNatGateways", "ec2:DescribeSpotFleetRequests", "ec2:DescribeTransitGateways", "ec2:DescribeVolumes", "ec2:DescribeVpnConnections", "ecs:ListClusters", "eks:ListClusters", "elasticache:DescribeCacheClusters", "elasticbeanstalk:DescribeEnvironmentResources", "elasticbeanstalk:DescribeEnvironments", "elasticfilesystem:DescribeFileSystems", "elasticloadbalancing:DescribeInstanceHealth", "elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DescribeRules", "elasticloadbalancing:DescribeTags", "elasticloadbalancing:DescribeTargetHealth", "elasticmapreduce:ListClusters", "elastictranscoder:ListPipelines", "es:ListDomainNames", "events:ListEventBuses", "firehose:ListDeliveryStreams", "fsx:DescribeFileSystems", "gamelift:ListFleets", "glue:GetJobs", "inspector:ListAssessmentTemplates", "kafka:ListClusters", "kinesis:ListStreams", "kinesisanalytics:ListApplications", "kinesisvideo:ListStreams", "lambda:ListFunctions", "lambda:ListTags", "lex:GetBots", "logs:DescribeLogGroups", "mediaconnect:ListFlows", "mediaconvert:DescribeEndpoints", "mediapackage-vod:ListPackagingConfigurations", "mediapackage:ListChannels", "mediatailor:ListPlaybackConfigurations", "opsworks:DescribeStacks", "qldb:ListLedgers", "rds:DescribeDBClusters", "rds:DescribeDBInstances", "rds:DescribeEvents", "rds:ListTagsForResource", "redshift:DescribeClusters", "robomaker:ListSimulationJobs", "route53:ListHostedZones", "route53resolver:ListResolverEndpoints", "s3:ListAllMyBuckets", "sagemaker:ListEndpoints", "sns:ListTopics", "sqs:ListQueues", "storagegateway:ListGateways", "sts:GetCallerIdentity", "swf:ListDomains", "tag:GetResources", "tag:GetTagKeys", "transfer:ListServers", "workmail:ListOrganizations", "workspaces:DescribeWorkspaces" ], "Resource": "*" } ] }

If you don't want to add permissions to all services, and just select permissions for certain services, consult the table below. The table contains a set of permissions that are required for all services (All monitored Amazon services) and, for each supporting service, a list of optional permissions specific to that service.

Complete list of permissions for cloud services
NameAdditional permissions
AWS Certificate Manager Private Certificate Authority"acm-pca:ListCertificateAuthorities"
All monitored Amazon services"cloudwatch:GetMetricData",
"cloudwatch:GetMetricStatistics",
"cloudwatch:ListMetrics",
"sts:GetCallerIdentity",
"tag:GetResources",
"tag:GetTagKeys",
"ec2:DescribeAvailabilityZones"
Amazon MQ
Amazon API Gateway"apigateway:GET"
AWS App Runner"apprunner:ListServices"
Amazon AppStream"appstream:DescribeFleets"
AWS AppSync"appsync:ListGraphqlApis"
Amazon Athena"athena:ListWorkGroups"
Amazon Aurora"rds:DescribeDBClusters"
Amazon EC2 Auto Scaling"autoscaling:DescribeAutoScalingGroups"
Amazon EC2 Auto Scaling (built-in)"autoscaling:DescribeAutoScalingGroups"
AWS Billing
Amazon Keyspaces
AWS Chatbot
Amazon CloudFront"cloudfront:ListDistributions"
AWS CloudHSM"cloudhsm:DescribeClusters"
Amazon CloudSearch"cloudsearch:DescribeDomains"
AWS CodeBuild"codebuild:ListProjects"
Amazon Cognito
Amazon Connect
Amazon Elastic Kubernetes Service (EKS)"eks:ListClusters"
AWS DataSync"datasync:ListTasks"
Amazon DynamoDB Accelerator (DAX)"dax:DescribeClusters"
Amazon Database Migration Service"dms:DescribeReplicationInstances"
Amazon DocumentDB"rds:DescribeDBClusters"
AWS Direct Connect"directconnect:DescribeConnections"
Amazon DynamoDB (built-in)"dynamodb:ListTables",
"dynamodb:ListTagsOfResource"
Amazon EBS (built-in)"ec2:DescribeVolumes"
Amazon EC2 API
Amazon EC2 (built-in)"ec2:DescribeInstances"
Amazon EC2 Spot Fleet"ec2:DescribeSpotFleetRequests"
Amazon Elastic Container Service (ECS)"ecs:ListClusters"
Amazon ECS ContainerInsights"ecs:ListClusters"
Amazon ElastiCache (EC)"elasticache:DescribeCacheClusters"
AWS Elastic Beanstalk"elasticbeanstalk:DescribeEnvironments"
Amazon Elastic File System (EFS)"elasticfilesystem:DescribeFileSystems"
Amazon Elastic Inference
Amazon Elastic Map Reduce (EMR)"elasticmapreduce:ListClusters"
Amazon Elasticsearch Service (ES)"es:ListDomainNames"
Amazon Elastic Transcoder"elastictranscoder:ListPipelines"
AWS Elastic Load Balancing (ELB) (built-in)"elasticloadbalancing:DescribeInstanceHealth",
"elasticloadbalancing:DescribeListeners",
"elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DescribeRules",
"elasticloadbalancing:DescribeTags",
"elasticloadbalancing:DescribeTargetHealth"
Amazon EventBridge"events:ListEventBuses"
Amazon FSx"fsx:DescribeFileSystems"
Amazon GameLift"gamelift:ListFleets"
AWS Glue"glue:GetJobs"
Amazon Inspector"inspector:ListAssessmentTemplates"
AWS Internet of Things (IoT)
AWS IoT Analytics
Amazon Managed Streaming for Kafka"kafka:ListClusters"
Amazon Kinesis Data Analytics"kinesisanalytics:ListApplications"
Amazon Kinesis Data Firehose"firehose:ListDeliveryStreams"
Amazon Kinesis Data Streams"kinesis:ListStreams"
Amazon Kinesis Video Streams"kinesisvideo:ListStreams"
AWS Lambda (built-in)"lambda:ListFunctions",
"lambda:ListTags"
Amazon Lex"lex:GetBots"
AWS Application and Network Load Balancer (built-in)"elasticloadbalancing:DescribeInstanceHealth",
"elasticloadbalancing:DescribeListeners",
"elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DescribeRules",
"elasticloadbalancing:DescribeTags",
"elasticloadbalancing:DescribeTargetHealth"
Amazon CloudWatch Logs"logs:DescribeLogGroups"
AWS Elemental MediaConnect"mediaconnect:ListFlows"
Amazon MediaConvert"mediaconvert:DescribeEndpoints"
Amazon MediaPackage Live"mediapackage:ListChannels"
Amazon MediaPackage Video on Demand"mediapackage-vod:ListPackagingConfigurations"
Amazon MediaTailor"mediatailor:ListPlaybackConfigurations"
Amazon VPC NAT Gateways"ec2:DescribeNatGateways"
Amazon Neptune"rds:DescribeDBClusters"
AWS OpsWorks"opsworks:DescribeStacks"
Amazon Polly
Amazon QLDB"qldb:ListLedgers"
Amazon RDS (built-in)"rds:DescribeDBInstances",
"rds:DescribeEvents",
"rds:ListTagsForResource"
Amazon Redshift"redshift:DescribeClusters"
Amazon Rekognition
AWS RoboMaker"robomaker:ListSimulationJobs"
Amazon Route 53"route53:ListHostedZones"
Amazon Route 53 Resolver"route53resolver:ListResolverEndpoints"
Amazon S3"s3:ListAllMyBuckets"
Amazon S3 (built-in)"s3:ListAllMyBuckets"
Amazon SageMaker Batch Transform Jobs
Amazon SageMaker Endpoint Instances"sagemaker:ListEndpoints"
Amazon SageMaker Endpoints"sagemaker:ListEndpoints"
Amazon SageMaker Ground Truth
Amazon SageMaker Processing Jobs
Amazon SageMaker Training Jobs
AWS Service Catalog
Amazon Simple Email Service (SES)
Amazon Simple Notification Service (SNS)"sns:ListTopics"
Amazon Simple Queue Service (SQS)"sqs:ListQueues"
AWS Systems Manager - Run Command
AWS Step Functions
AWS Storage Gateway"storagegateway:ListGateways"
Amazon SWF"swf:ListDomains"
Amazon Textract
AWS IoT Things Graph
Amazon Transfer Family"transfer:ListServers"
AWS Transit Gateway"ec2:DescribeTransitGateways"
Amazon Translate
AWS Trusted Advisor
AWS API Usage
AWS Site-to-Site VPN"ec2:DescribeVpnConnections"
Amazon WAF Classic
Amazon WAF
Amazon WorkMail"workmail:ListOrganizations"
Amazon WorkSpaces"workspaces:DescribeWorkspaces"

Example of JSON policy for one single service.

JSON policy for Amazon API Gateway
json
{ "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": [ "apigateway:GET", "cloudwatch:GetMetricData", "cloudwatch:GetMetricStatistics", "cloudwatch:ListMetrics", "sts:GetCallerIdentity", "tag:GetResources", "tag:GetTagKeys", "ec2:DescribeAvailabilityZones" ], "Resource": "*" } ] }

In this example, from the complete list of permissions you need to select

  • "apigateway:GET" for Amazon API Gateway
  • "cloudwatch:GetMetricData", "cloudwatch:GetMetricStatistics", "cloudwatch:ListMetrics", "sts:GetCallerIdentity", "tag:GetResources", "tag:GetTagKeys", and "ec2:DescribeAvailabilityZones" for All monitored Amazon services.
AWS endpoints that need to be reachable from ActiveGate with corresponding AWS services
EndpointService

acm-pca.<REGION>.amazonaws.com

AWS Certificate Manager Private Certificate Authority

apigateway.<REGION>.amazonaws.com

Amazon API Gateway

apprunner.<REGION>.amazonaws.com

AWS App Runner

appstream2.<REGION>.amazonaws.com

Amazon AppStream

appsync.<REGION>.amazonaws.com

AWS AppSync

athena.<REGION>.amazonaws.com

Amazon Athena

rds.<REGION>.amazonaws.com

Amazon Aurora, Amazon DocumentDB, Amazon Neptune, Amazon RDS (built-in)

autoscaling.<REGION>.amazonaws.com

Amazon EC2 Auto Scaling, Amazon EC2 Auto Scaling (built-in)

cloudfront.amazonaws.com

Amazon CloudFront

cloudhsmv2.<REGION>.amazonaws.com

AWS CloudHSM

cloudsearch.<REGION>.amazonaws.com

Amazon CloudSearch

cloudsearch.<REGION>.amazonaws.com

Amazon CloudSearch

codebuild.<REGION>.amazonaws.com

AWS CodeBuild

eks.<REGION>.amazonaws.com

Amazon Elastic Kubernetes Service (EKS)

datasync.<REGION>.amazonaws.com

AWS DataSync

dax.<REGION>.amazonaws.com

Amazon DynamoDB Accelerator (DAX)

dms.<REGION>.amazonaws.com

Amazon Database Migration Service

directconnect.<REGION>.amazonaws.com

AWS Direct Connect

dynamodb.<REGION>.amazonaws.com

Amazon DynamoDB (built-in)

ec2.<REGION>.amazonaws.com

Amazon EBS (built-in), Amazon EC2 (built-in), Amazon EC2 Spot Fleet, Amazon VPC NAT Gateways, AWS Transit Gateway, AWS Site-to-Site VPN

ecs.<REGION>.amazonaws.com

Amazon Elastic Container Service (ECS), Amazon ECS ContainerInsights

elasticache.<REGION>.amazonaws.com

Amazon ElastiCache (EC)

elasticbeanstalk.<REGION>.amazonaws.com

AWS Elastic Beanstalk, AWS Elastic Beanstalk (built-in)

elasticfilesystem.<REGION>.amazonaws.com

Amazon Elastic File System (EFS)

es.<REGION>.amazonaws.com

Amazon Elasticsearch Service (ES)

elastictranscoder.<REGION>.amazonaws.com

Amazon Elastic Transcoder

elasticloadbalancing.<REGION>.amazonaws.com

AWS Elastic Load Balancing (ELB) (built-in), AWS Application and Network Load Balancer (built-in)

events.<REGION>.amazonaws.com

Amazon EventBridge

elastictranscoder.<REGION>.amazonaws.com

Amazon Elastic Transcoder

elasticloadbalancing.<REGION>.amazonaws.com

AWS Elastic Load Balancing (ELB) (built-in), AWS Application and Network Load Balancer (built-in)

events.<REGION>.amazonaws.com

AWS Elastic Load Balancing (ELB) (built-in), AWS Application and Network Load Balancer (built-in)

fsx.<REGION>.amazonaws.com

Amazon FSx

gamelift.<REGION>.amazonaws.com

Amazon GameLift

glue.<REGION>.amazonaws.com

AWS Glue

inspector.<REGION>.amazonaws.com

Amazon Inspector

kafka.<REGION>.amazonaws.com

Amazon Managed Streaming for Kafka

lambda.<REGION>.amazonaws.com

AWS Lambda (built-in)

models.lex.<REGION>.amazonaws.com

Amazon Lex

logs.<REGION>.amazonaws.com

Amazon CloudWatch Logs

mediaconnect.<REGION>.amazonaws.com

AWS Elemental MediaConnect

mediapackage.<REGION>.amazonaws.com

Amazon MediaPackage Live

mediapackage-vod.<REGION>.amazonaws.com

Amazon MediaPackage Video on Demand

api.mediatailor.<REGION>.amazonaws.com

Amazon MediaTailor

opsworks.<REGION>.amazonaws.com

AWS OpsWorks

qldb.<REGION>.amazonaws.com

Amazon QLDB

redshift.<REGION>.amazonaws.com

Amazon Redshift

robomaker.<REGION>.amazonaws.com

Amazon Redshift

route53.amazonaws.com

Amazon Route 53

route53resolver.<REGION>.amazonaws.com

Amazon Route 53 Resolver

s3.<REGION>.amazonaws.com

Amazon S3 (built-in)

api.sagemaker.<REGION>.amazonaws.com

Amazon SageMaker Endpoint Instances, Amazon SageMaker Endpoints

sns.<REGION>.amazonaws.com

Amazon S3 (built-in)

sqs.<REGION>.amazonaws.com

Amazon Simple Queue Service (SQS)

storagegateway.<REGION>.amazonaws.com

AWS Storage Gateway

swf.<REGION>.amazonaws.com

Amazon SWF

transfer.<REGION>.amazonaws.com

Amazon Transfer Family

workmail.<REGION>.amazonaws.com

Amazon WorkMail

workspaces.<REGION>.amazonaws.com

Amazon WorkSpaces

View service metrics

You can view the service metrics in your Dynatrace environment either on the custom device overview page or on your Dashboards page.

View metrics on the custom device overview page

To access the custom device overview page

  1. In the Dynatrace menu, go to Technologies and processes.
  2. Filter by service name and select the relevant custom device group.
  3. Once you select the custom device group, you're on the custom device group overview page.
  4. The custom device group overview page lists all instances (custom devices) belonging to the group. Select an instance to view the custom device overview page.

View service metrics

You can view the service metrics in your Dynatrace environment either on the custom device overview page or on your Dashboards page.

View metrics on the custom device overview page

To access the custom device overview page

  1. In the Dynatrace menu, go to Technologies and processes.
  2. Filter by service name and select the relevant custom device group.
  3. Once you select the custom device group, you're on the custom device group overview page.
  4. The custom device group overview page lists all instances (custom devices) belonging to the group. Select an instance to view the custom device overview page.

Amazon QLDB service shows on the custom device group page. The service is made up of instances (custom devices) called ledgers. You can view metrics for each custom device in the Further details section of the custom device overview page, split by Streams and Command types.

View metrics on your dashboard

After you add the service to monitoring, a preset dashboard containing all recommended metrics is automatically listed on your Dashboards page. To look for specific dashboards, filter by Preset and then by Name.

AWS presets

Note: For existing monitored services, you might need to resave your credentials for the preset dashboard to appear on the Dashboards page. To resave your credentials, go to Settings > Cloud and virtualization > AWS, select the desired AWS instance, and then select Save.

You can't make changes on a preset dashboard directly, but you can clone and edit it. To clone a dashboard, open the browse menu (…) and select Clone.

To remove a dashboard from the dashboards page, you can hide it. To hide a dashboard, open the browse menu (…) and select Hide.

Note: Hiding a dashboard doesn't affect other users.

Clone hide AWS

To check the availability of preset dashboards for each AWS service, see the list below.

Preset dashboard availability list
AWS servicePreset dashboard
AWS Certificate Manager Private Certificate Authorityno
Amazon MQyes
Amazon API Gatewayno
AWS App Runnerno
Amazon AppStreamyes
AWS AppSyncyes
Amazon Athenayes
Amazon Aurorano
Amazon EC2 Auto Scalingyes
Amazon EC2 Auto Scaling (built-in)no
AWS Billingyes
Amazon Keyspacesyes
AWS Chatbotyes
Amazon CloudFrontno
AWS CloudHSMyes
Amazon CloudSearchyes
AWS CodeBuildyes
Amazon Cognitono
Amazon Connectyes
Amazon Elastic Kubernetes Service (EKS)yes
AWS DataSyncyes
Amazon DynamoDB Accelerator (DAX)yes
Amazon Database Migration Serviceyes
Amazon DocumentDByes
AWS Direct Connectyes
Amazon DynamoDB (built-in)no
Amazon EBS (built-in)no
Amazon EC2 APIyes
Amazon EC2 (built-in)no
Amazon EC2 Spot Fleetno
Amazon Elastic Container Service (ECS)no
Amazon ECS ContainerInsightsyes
Amazon ElastiCache (EC)no
AWS Elastic Beanstalkyes
Amazon Elastic File System (EFS)no
Amazon Elastic Inferenceyes
Amazon Elastic Map Reduce (EMR)no
Amazon Elasticsearch Service (ES)no
Amazon Elastic Transcoderyes
AWS Elastic Load Balancing (ELB) (built-in)no
Amazon EventBridgeyes
Amazon FSxyes
Amazon GameLiftyes
AWS Glueno
Amazon Inspectoryes
AWS Internet of Things (IoT)no
AWS IoT Analyticsyes
Amazon Managed Streaming for Kafkayes
Amazon Kinesis Data Analyticsno
Amazon Kinesis Data Firehoseno
Amazon Kinesis Data Streamsno
Amazon Kinesis Video Streamsno
AWS Lambda (built-in)no
Amazon Lexyes
AWS Application and Network Load Balancer (built-in)no
Amazon CloudWatch Logsyes
AWS Elemental MediaConnectyes
Amazon MediaConvertyes
Amazon MediaPackage Liveyes
Amazon MediaPackage Video on Demandyes
Amazon MediaTailoryes
Amazon VPC NAT Gatewaysno
Amazon Neptuneyes
AWS OpsWorksyes
Amazon Pollyyes
Amazon QLDByes
Amazon RDS (built-in)no
Amazon Redshiftno
Amazon Rekognitionyes
AWS RoboMakeryes
Amazon Route 53yes
Amazon Route 53 Resolveryes
Amazon S3no
Amazon S3 (built-in)no
Amazon SageMaker Batch Transform Jobsno
Amazon SageMaker Endpoint Instancesno
Amazon SageMaker Endpointsno
Amazon SageMaker Ground Truthno
Amazon SageMaker Processing Jobsno
Amazon SageMaker Training Jobsno
AWS Service Catalogyes
Amazon Simple Email Service (SES)no
Amazon Simple Notification Service (SNS)no
Amazon Simple Queue Service (SQS)no
AWS Systems Manager - Run Commandyes
AWS Step Functionsyes
AWS Storage Gatewayyes
Amazon SWFyes
Amazon Textractyes
AWS IoT Things Graphyes
Amazon Transfer Familyyes
AWS Transit Gatewayyes
Amazon Translateyes
AWS Trusted Advisoryes
AWS API Usageyes
AWS Site-to-Site VPNyes
Amazon WAF Classicyes
Amazon WAFyes
Amazon WorkMailyes
Amazon WorkSpacesyes

Qldb

Available metrics

About dimensions
  • LedgerName limits the data to a specific ledger. This value can be any ledger name in the current AWS Region and the current AWS account.
  • StreamId limits the data to a specific journal stream. This value can be any stream ID for a ledger in the current AWS Region and the current AWS account.
  • CommandType limits the data to one of the following QLDB data API commands: AbortTransaction, CommitTransaction, EndSession, ExecuteStatement, FetchPage, StartSession, StartTransaction.
NameDescriptionUnitStatisticsDimensionsRecommended
CommandLatencyThe amount of time taken for data operations, reported in one-minute intervalsMillisecondsMultiLedgerName, CommandType✔️
IndexedStorageThe total amount of disk space used by the ledger's tables, indexes, and indexed history, reported in 15-minute intervalsBytesMultiLedgerName✔️
IsImpairedThe flag that indicates if a journal stream to Kinesis Data Streams is impaired, reported in one-minute intervalsCountMaximumLedgerName, StreamId✔️
JournalStorageThe total amount of disk space used by the ledger's journal, reported in 15-minute intervalsBytesMultiLedgerName✔️
OccConflictExceptionsThe number of requests to QLDB that generate an OccConflictExceptionCountSumLedgerName✔️
ReadIOsThe number of disk read I/O operations, reported in one-minute intervalsCountSumLedgerName✔️
ReadIOsCountMultiLedgerName✔️
SessionRateExceededExceptionsThe number of requests to QLDB that generate a SessionRateExceededExceptionCountSumLedgerName✔️
Session4xxExceptionsThe number of requests to QLDB that generate an HTTP 4xx errorCountSumLedgerName✔️
Session5xxExceptionsThe number of requests to QLDB that generate an HTTP 5xx errorCountSumLedgerName✔️
WriteIOsThe number of disk write I/O operations, reported in one-minute intervalsCountSumLedgerName✔️
WriteIOsCountMultiLedgerName✔️