Amazon Elastic Load Balancing
Version: AWS Log Forwarder v1.0.10 and above.
Elastic Load Balancing distributes incoming traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses automatically, in one or more AWS Availability Zones. It monitors the health of its registered targets, and routes traffic only to the healthy targets, and scales the load balancers as per incoming traffic.
Netsurion Open XDR monitors events from Amazon Elastic Load Balancing (ELB) by parsing the AWS CloudTrail logs for it. Dashboards and reports in Netsurion Open XDR allow you to monitor overall actions performed related to the ELB service so that you are informed about its activities. It will trigger alerts whenever an action critical to the application is carried out.
For a new instance, integrate the AWS instance to Netsurion Open XDR using the Netsurion integrator AWS Lambda function, which will in turn deliver logs to Netsurion Open XDR from Amazon Web Services. For an already-integrated AWS instance, make sure to update to AWS Log Forwarder to v1.0.10 or above.
The following are the key Data Source Integration available in Netsurion Open XDR.
Alerts
| Type | Name | Description |
|---|---|---|
| Security | AWS ELB – Load balancer listener deleted | This alert is triggered when a listener is deleted from a particular load balancer. |
| Security | AWS ELB – Instance deregistered | This alert is triggered when an instance is removed from the list of associated instances in a load balancer. |
| Security | AWS ELB – Load balancer subnet/AZ removed | This alert is triggered when a subnet or Availability Zone (AZ) is removed from the configuration settings of a load balancer. |
| Security | AWS ELB – Target group deleted | This alert is triggered when a target group is deleted from the load balancer configuration. |
| Security | AWS ELB – Load balancer deleted | This alert is triggered when a load balancer is purged and removed from the ELB service. |
Reports
| Type | Name | Description |
|---|---|---|
|
Security |
AWS ELB – Elastic load balancer activities |
This Netsurion report will give a detailed overview of the actions triggered by the AWS ELB service. It gives information about the action, the time the action was triggered, user information related to it among some other details related to the configured load balancers. |
Documentation
The configuration details are consistent with Netsurion Open XDR 9.3 and later, and ETS AWS LogForwarder v1.0.10 and above.
Download Integration Guide and How-to Guide for configuration instructions and more information.