Fortinet white logo
Fortinet white logo

External Systems Configuration Guide

AWS RDS

AWS RDS

What is Discovered and Monitored

Type Protocol Information Discovered Metrics Collected Used For
Relational Database Storage (RDS) CloudWatch API
  • CPU Utilization
  • User Connections
  • Free Memory
  • Free Storage
  • Used Swap
  • Read Latency
  • Write Latency
  • Read Ops
  • Write Ops
Performance Monitoring

Event Types

  • PH_DEV_MON_RDS_METRIC captures RDS metrics

Configuration

If you have not already configured Access Keys and permissions in AWS, please follow the steps outlined in AWS Access Key IAM Permissions and IAM Policies.

Discovering AWS RDS
  1. Go to the ADMIN > Setup > Credentials tab.
  2. In Step 1: Enter Credentials:
    1. Follow the instructions in “Setting Credentials“ in the User's Guide to create a new credential.
    2. Enter these settings in the Access Method Definition dialog box and click Save:

      Settings Description
      Name Enter a name for the credential
      Device Type Amazon AWS RDS
      Access Protocol AWS SDK
      RegionSet Region as the region in which your AWS instance is located.
      Password ConfigSee Password Configuration.
      Access Key IDAccess key for your EC2 instance.
      Secret Key Secret key for your EC2 instance
      Organization Select an Organization from the drop-down list.
      Description Description of the device.
  3. In Step 2: Enter IP Range to Credential Associations, click New.
    1. Set IP/Host Name to amazon.com.
    2. Select the name of your AWS RDS credential from the Credentials drop-down list.
    3. Click Save.
  4. Click the Test drop-down list and select Test Connectivity to test the connection to AWS RDS.
  5. Go to ADMIN > Setup > Discovery.
  6. Click New.
  7. Fill out the information in the Discovery Definition window, ensuring you set Discovery Type as AWS Scan.
  8. When done, click Save.
  9. Select the entry and click Discover.
  10. After Discovery finishes, check CMDB > Devices > Amazon Web Services > AWS Database.

Sample Events

[PH_DEV_MON_RDS_METRIC]:[eventSeverity]=PHL_INFO,[fileName]=deviceAwsRDS.cpp,[lineNumber]=104,[hostName]=mysql1.cmdzvvce07ar.ap-northeast-1.rds.amazonaws.com,[hostIpAddr]=54.64.131.93,[dbCpuTimeRatio]=1.207500,[dbUserConn]=0,[dbEnqueueDeadlocksPerSec]=0.000587,[freeMemKB]=489,[freeDiskMB]=4555,[swapMemUtil]=0.000000,[ioReadsPerSec]=0.219985,[ioWritesPerSec]=0.213329,[devDiskRdLatency]=0.08,[devDiskWrLatency]=0.4029,[phLogDetail]=

AWS RDS

AWS RDS

What is Discovered and Monitored

Type Protocol Information Discovered Metrics Collected Used For
Relational Database Storage (RDS) CloudWatch API
  • CPU Utilization
  • User Connections
  • Free Memory
  • Free Storage
  • Used Swap
  • Read Latency
  • Write Latency
  • Read Ops
  • Write Ops
Performance Monitoring

Event Types

  • PH_DEV_MON_RDS_METRIC captures RDS metrics

Configuration

If you have not already configured Access Keys and permissions in AWS, please follow the steps outlined in AWS Access Key IAM Permissions and IAM Policies.

Discovering AWS RDS
  1. Go to the ADMIN > Setup > Credentials tab.
  2. In Step 1: Enter Credentials:
    1. Follow the instructions in “Setting Credentials“ in the User's Guide to create a new credential.
    2. Enter these settings in the Access Method Definition dialog box and click Save:

      Settings Description
      Name Enter a name for the credential
      Device Type Amazon AWS RDS
      Access Protocol AWS SDK
      RegionSet Region as the region in which your AWS instance is located.
      Password ConfigSee Password Configuration.
      Access Key IDAccess key for your EC2 instance.
      Secret Key Secret key for your EC2 instance
      Organization Select an Organization from the drop-down list.
      Description Description of the device.
  3. In Step 2: Enter IP Range to Credential Associations, click New.
    1. Set IP/Host Name to amazon.com.
    2. Select the name of your AWS RDS credential from the Credentials drop-down list.
    3. Click Save.
  4. Click the Test drop-down list and select Test Connectivity to test the connection to AWS RDS.
  5. Go to ADMIN > Setup > Discovery.
  6. Click New.
  7. Fill out the information in the Discovery Definition window, ensuring you set Discovery Type as AWS Scan.
  8. When done, click Save.
  9. Select the entry and click Discover.
  10. After Discovery finishes, check CMDB > Devices > Amazon Web Services > AWS Database.

Sample Events

[PH_DEV_MON_RDS_METRIC]:[eventSeverity]=PHL_INFO,[fileName]=deviceAwsRDS.cpp,[lineNumber]=104,[hostName]=mysql1.cmdzvvce07ar.ap-northeast-1.rds.amazonaws.com,[hostIpAddr]=54.64.131.93,[dbCpuTimeRatio]=1.207500,[dbUserConn]=0,[dbEnqueueDeadlocksPerSec]=0.000587,[freeMemKB]=489,[freeDiskMB]=4555,[swapMemUtil]=0.000000,[ioReadsPerSec]=0.219985,[ioWritesPerSec]=0.213329,[devDiskRdLatency]=0.08,[devDiskWrLatency]=0.4029,[phLogDetail]=