Skip to content

aws.devops_guru.list_anomalies_for_insight

Example SQL Queries

SELECT * FROM
aws.devops_guru.list_anomalies_for_insight
WHERE
"insight_id" = 'VALUE';

Description

Returns a list of the anomalies that belong to an insight that you specify using its ID.

Table Definition

Column NameColumn Data Type
insight_id Required Input Column

The ID of the insight. The returned anomalies belong to this insight.

VARCHAR
account_id Input Column

The ID of the Amazon Web Services account.

VARCHAR
filters Input Column

Specifies one or more service names that are used to list anomalies.

STRUCT(
"service_collection" STRUCT(
"service_names" VARCHAR[]
)
)
Show child fields
filters.service_collection

A collection of the names of Amazon Web Services services.

Show child fields
filters.service_collection.service_names[]
start_time_range Input Column

A time range used to specify when the requested anomalies started. All returned anomalies started during this time range.

STRUCT(
"from_time" TIMESTAMP_S,
"to_time" TIMESTAMP_S
)
Show child fields
start_time_range.from_time

The start time of the time range.

start_time_range.to_time

The end time of the time range.

_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
"type" VARCHAR,
"name" VARCHAR,
"account_id" VARCHAR,
"via_profile_name" VARCHAR,
"assumed_role_arn" VARCHAR,
"organization" STRUCT(
"account_name" VARCHAR,
"id" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"master_account" STRUCT(
"id" VARCHAR,
"email" VARCHAR
),
"parents" STRUCT(
"type" VARCHAR,
"id" VARCHAR,
"name" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
)[]
)
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
proactive_anomalies

An array of ProactiveAnomalySummary objects that represent the requested anomalies

STRUCT(
"id" VARCHAR,
"severity" VARCHAR,
"status" VARCHAR,
"update_time" TIMESTAMP_S,
"anomaly_time_range" STRUCT(
"start_time" TIMESTAMP_S,
"end_time" TIMESTAMP_S
),
"anomaly_reported_time_range" STRUCT(
"open_time" TIMESTAMP_S,
"close_time" TIMESTAMP_S
),
"prediction_time_range" STRUCT(
"start_time" TIMESTAMP_S,
"end_time" TIMESTAMP_S
),
"source_details" STRUCT(
"cloud_watch_metrics" STRUCT(
"metric_name" VARCHAR,
"namespace" VARCHAR,
"dimensions" STRUCT(
"name" VARCHAR,
"value" VARCHAR
)[],
"stat" VARCHAR,
"unit" VARCHAR,
"period" BIGINT,
"metric_data_summary" STRUCT(
"timestamp_metric_value_pair_list" STRUCT(
"timestamp" TIMESTAMP_S,
"metric_value" DOUBLE
)[],
"status_code" VARCHAR
)
)[],
"performance_insights_metrics" STRUCT(
"metric_display_name" VARCHAR,
"unit" VARCHAR,
"metric_query" STRUCT(
"metric" VARCHAR,
"group_by" STRUCT(
"group" VARCHAR,
"dimensions" VARCHAR[],
"limit" BIGINT
),
"filter" MAP(VARCHAR, VARCHAR)
),
"reference_data" STRUCT(
"name" VARCHAR,
"comparison_values" STRUCT(
"reference_scalar" STRUCT(
"value" DOUBLE
),
"reference_metric" STRUCT(
"metric_query" STRUCT(
"metric" VARCHAR,
"group_by" STRUCT(
"group" VARCHAR,
"dimensions" VARCHAR[],
"limit" BIGINT
),
"filter" MAP(VARCHAR, VARCHAR)
)
)
)
)[],
"stats_at_anomaly" STRUCT(
"type" VARCHAR,
"value" DOUBLE
)[],
"stats_at_baseline" STRUCT(
"type" VARCHAR,
"value" DOUBLE
)[]
)[]
),
"associated_insight_id" VARCHAR,
"resource_collection" STRUCT(
"cloud_formation" STRUCT(
"stack_names" VARCHAR[]
),
"tags" STRUCT(
"app_boundary_key" VARCHAR,
"tag_values" VARCHAR[]
)[]
),
"limit" DOUBLE,
"source_metadata" STRUCT(
"source" VARCHAR,
"source_resource_name" VARCHAR,
"source_resource_type" VARCHAR
),
"anomaly_resources" STRUCT(
"name" VARCHAR,
"type" VARCHAR
)[],
"description" VARCHAR
)[]
Show child fields
proactive_anomalies[]
Show child fields
proactive_anomalies[].anomaly_reported_time_range

An AnomalyReportedTimeRange object that specifies the time range between when the anomaly is opened and the time when it is closed.

Show child fields
proactive_anomalies[].anomaly_reported_time_range.close_time

The time when an anomaly is closed.

proactive_anomalies[].anomaly_reported_time_range.open_time

The time when an anomaly is opened.

proactive_anomalies[].anomaly_resources[]
Show child fields
proactive_anomalies[].anomaly_resources[].name

The name of the Amazon Web Services resource.

proactive_anomalies[].anomaly_resources[].type

The type of the Amazon Web Services resource.

proactive_anomalies[].anomaly_time_range

A time range that specifies when the observed unusual behavior in an anomaly started and ended. This is different from AnomalyReportedTimeRange, which specifies the time range when DevOps Guru opens and then closes an anomaly.

Show child fields
proactive_anomalies[].anomaly_time_range.end_time

The time when the anomalous behavior ended.

proactive_anomalies[].anomaly_time_range.start_time

The time when the anomalous behavior started.

proactive_anomalies[].associated_insight_id

The ID of the insight that contains this anomaly. An insight is composed of related anomalies.

proactive_anomalies[].description

A description of the proactive anomaly.

proactive_anomalies[].id

The ID of the anomaly.

proactive_anomalies[].limit

A threshold that was exceeded by behavior in analyzed resources. Exceeding this threshold is related to the anomalous behavior that generated this anomaly.

proactive_anomalies[].prediction_time_range

The time range during which anomalous behavior in a proactive anomaly or an insight is expected to occur.

Show child fields
proactive_anomalies[].prediction_time_range.end_time

The time when the behavior in a proactive insight is expected to end.

proactive_anomalies[].prediction_time_range.start_time

The time range during which a metric limit is expected to be exceeded. This applies to proactive insights only.

proactive_anomalies[].resource_collection

A collection of Amazon Web Services resources supported by DevOps Guru. The two types of Amazon Web Services resource collections supported are Amazon Web Services CloudFormation stacks and Amazon Web Services resources that contain the same Amazon Web Services tag. DevOps Guru can be configured to analyze the Amazon Web Services resources that are defined in the stacks or that are tagged using the same tag key. You can specify up to 500 Amazon Web Services CloudFormation stacks.

Show child fields
proactive_anomalies[].resource_collection.cloud_formation

An array of the names of Amazon Web Services CloudFormation stacks. The stacks define Amazon Web Services resources that DevOps Guru analyzes. You can specify up to 500 Amazon Web Services CloudFormation stacks.

Show child fields
proactive_anomalies[].resource_collection.cloud_formation.stack_names[]
proactive_anomalies[].resource_collection.tags[]
Show child fields
proactive_anomalies[].resource_collection.tags[].app_boundary_key

An Amazon Web Services tag key that is used to identify the Amazon Web Services resources that DevOps Guru analyzes. All Amazon Web Services resources in your account and Region tagged with this key make up your DevOps Guru application and analysis boundary.

The string used for a key in a tag that you use to define your resource coverage must begin with the prefix Devops-guru-. The tag key might be DevOps-Guru-deployment-application or devops-guru-rds-application. When you create a key, the case of characters in the key can be whatever you choose. After you create a key, it is case-sensitive. For example, DevOps Guru works with a key named devops-guru-rds and a key named DevOps-Guru-RDS, and these act as two different keys. Possible key/value pairs in your application might be Devops-Guru-production-application/RDS or Devops-Guru-production-application/containers.

proactive_anomalies[].resource_collection.tags[].tag_values[]
proactive_anomalies[].severity

The severity of the anomaly. The severity of anomalies that generate an insight determine that insight's severity. For more information, see Understanding insight severities in the Amazon DevOps Guru User Guide.

proactive_anomalies[].source_details

Details about the source of the analyzed operational data that triggered the anomaly. The one supported source is Amazon CloudWatch metrics.

Show child fields
proactive_anomalies[].source_details.cloud_watch_metrics[]
Show child fields
proactive_anomalies[].source_details.cloud_watch_metrics[].dimensions[]
Show child fields
proactive_anomalies[].source_details.cloud_watch_metrics[].dimensions[].name

The name of the CloudWatch dimension.

proactive_anomalies[].source_details.cloud_watch_metrics[].dimensions[].value

The value of the CloudWatch dimension.

proactive_anomalies[].source_details.cloud_watch_metrics[].metric_data_summary

This object returns anomaly metric data.

Show child fields
proactive_anomalies[].source_details.cloud_watch_metrics[].metric_data_summary.status_code

This is an enum of the status showing whether the metric value pair list has partial or complete data, or if there was an error.

proactive_anomalies[].source_details.cloud_watch_metrics[].metric_data_summary.timestamp_metric_value_pair_list[]
Show child fields
proactive_anomalies[].source_details.cloud_watch_metrics[].metric_data_summary.timestamp_metric_value_pair_list[].metric_value

Value of the anomalous metric data point at respective Timestamp.

proactive_anomalies[].source_details.cloud_watch_metrics[].metric_data_summary.timestamp_metric_value_pair_list[].timestamp

A Timestamp that specifies the time the event occurred.

proactive_anomalies[].source_details.cloud_watch_metrics[].metric_name

The name of the CloudWatch metric.

proactive_anomalies[].source_details.cloud_watch_metrics[].namespace

The namespace of the CloudWatch metric. A namespace is a container for CloudWatch metrics.

proactive_anomalies[].source_details.cloud_watch_metrics[].period

The length of time associated with the CloudWatch metric in number of seconds.

proactive_anomalies[].source_details.cloud_watch_metrics[].stat

The type of statistic associated with the CloudWatch metric. For more information, see Statistics in the Amazon CloudWatch User Guide.

proactive_anomalies[].source_details.cloud_watch_metrics[].unit

The unit of measure used for the CloudWatch metric. For example, Bytes, Seconds, Count, and Percent.

proactive_anomalies[].source_details.performance_insights_metrics[]
Show child fields
proactive_anomalies[].source_details.performance_insights_metrics[].metric_display_name

The name used for a specific Performance Insights metric.

proactive_anomalies[].source_details.performance_insights_metrics[].metric_query

A single query to be processed for the metric. For more information, see PerformanceInsightsMetricQuery .

Show child fields
proactive_anomalies[].source_details.performance_insights_metrics[].metric_query.filter

One or more filters to apply to a Performance Insights GetResourceMetrics API query. Restrictions:

  • Any number of filters by the same dimension, as specified in the GroupBy parameter.

  • A single filter for any other dimension in this dimension group.

proactive_anomalies[].source_details.performance_insights_metrics[].metric_query.group_by

The specification for how to aggregate the data points from a Performance Insights GetResourceMetrics API query. The Performance Insights query returns all of the dimensions within that group, unless you provide the names of specific dimensions within that group. You can also request that Performance Insights return a limited number of values for a dimension.

Show child fields
proactive_anomalies[].source_details.performance_insights_metrics[].metric_query.group_by.dimensions[]
proactive_anomalies[].source_details.performance_insights_metrics[].metric_query.group_by.group

The name of the dimension group. Its valid values are:

  • db - The name of the database to which the client is connected (only Aurora PostgreSQL, Amazon RDS PostgreSQL, Aurora MySQL, Amazon RDS MySQL, and MariaDB)

  • db.application - The name of the application that is connected to the database (only Aurora PostgreSQL and RDS PostgreSQL)

  • db.host - The host name of the connected client (all engines)

  • db.session_type - The type of the current session (only Aurora PostgreSQL and RDS PostgreSQL)

  • db.sql - The SQL that is currently executing (all engines)

  • db.sql_tokenized - The SQL digest (all engines)

  • db.wait_event - The event for which the database backend is waiting (all engines)

  • db.wait_event_type - The type of event for which the database backend is waiting (all engines)

  • db.user - The user logged in to the database (all engines)

proactive_anomalies[].source_details.performance_insights_metrics[].metric_query.group_by.limit

The maximum number of items to fetch for this dimension group.

proactive_anomalies[].source_details.performance_insights_metrics[].metric_query.metric

The name of the meteric used used when querying an Performance Insights GetResourceMetrics API for anomaly metrics.

Valid values for Metric are:

  • db.load.avg - a scaled representation of the number of active sessions for the database engine.

  • db.sampledload.avg - the raw number of active sessions for the database engine.

If the number of active sessions is less than an internal Performance Insights threshold, db.load.avg and db.sampledload.avg are the same value. If the number of active sessions is greater than the internal threshold, Performance Insights samples the active sessions, with db.load.avg showing the scaled values, db.sampledload.avg showing the raw values, and db.sampledload.avg less than db.load.avg. For most use cases, you can query db.load.avg only.

proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[]
Show child fields
proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values

The specific reference values used to evaluate the Performance Insights. For more information, see PerformanceInsightsReferenceComparisonValues .

Show child fields
proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric

A metric that DevOps Guru compares to actual metric values. This reference metric is used to determine if an actual metric should be considered anomalous.

Show child fields
proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query

A query to be processed on the metric.

Show child fields
proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.filter

One or more filters to apply to a Performance Insights GetResourceMetrics API query. Restrictions:

  • Any number of filters by the same dimension, as specified in the GroupBy parameter.

  • A single filter for any other dimension in this dimension group.

proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.group_by

The specification for how to aggregate the data points from a Performance Insights GetResourceMetrics API query. The Performance Insights query returns all of the dimensions within that group, unless you provide the names of specific dimensions within that group. You can also request that Performance Insights return a limited number of values for a dimension.

Show child fields
proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.group_by.dimensions[]
proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.group_by.group

The name of the dimension group. Its valid values are:

  • db - The name of the database to which the client is connected (only Aurora PostgreSQL, Amazon RDS PostgreSQL, Aurora MySQL, Amazon RDS MySQL, and MariaDB)

  • db.application - The name of the application that is connected to the database (only Aurora PostgreSQL and RDS PostgreSQL)

  • db.host - The host name of the connected client (all engines)

  • db.session_type - The type of the current session (only Aurora PostgreSQL and RDS PostgreSQL)

  • db.sql - The SQL that is currently executing (all engines)

  • db.sql_tokenized - The SQL digest (all engines)

  • db.wait_event - The event for which the database backend is waiting (all engines)

  • db.wait_event_type - The type of event for which the database backend is waiting (all engines)

  • db.user - The user logged in to the database (all engines)

proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.group_by.limit

The maximum number of items to fetch for this dimension group.

proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.metric

The name of the meteric used used when querying an Performance Insights GetResourceMetrics API for anomaly metrics.

Valid values for Metric are:

  • db.load.avg - a scaled representation of the number of active sessions for the database engine.

  • db.sampledload.avg - the raw number of active sessions for the database engine.

If the number of active sessions is less than an internal Performance Insights threshold, db.load.avg and db.sampledload.avg are the same value. If the number of active sessions is greater than the internal threshold, Performance Insights samples the active sessions, with db.load.avg showing the scaled values, db.sampledload.avg showing the raw values, and db.sampledload.avg less than db.load.avg. For most use cases, you can query db.load.avg only.

proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_scalar

A scalar value DevOps Guru for a metric that DevOps Guru compares to actual metric values. This reference value is used to determine if an actual metric value should be considered anomalous.

Show child fields
proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_scalar.value

The reference value.

proactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].name

The name of the reference data.

proactive_anomalies[].source_details.performance_insights_metrics[].stats_at_anomaly[]
Show child fields
proactive_anomalies[].source_details.performance_insights_metrics[].stats_at_anomaly[].type

The statistic type.

proactive_anomalies[].source_details.performance_insights_metrics[].stats_at_anomaly[].value

The value of the statistic.

proactive_anomalies[].source_details.performance_insights_metrics[].stats_at_baseline[]
Show child fields
proactive_anomalies[].source_details.performance_insights_metrics[].stats_at_baseline[].type

The statistic type.

proactive_anomalies[].source_details.performance_insights_metrics[].stats_at_baseline[].value

The value of the statistic.

proactive_anomalies[].source_details.performance_insights_metrics[].unit

The unit of measure for a metric. For example, a session or a process.

proactive_anomalies[].source_metadata

The metadata of the source which detects proactive anomalies.

Show child fields
proactive_anomalies[].source_metadata.source

The source of the anomaly.

proactive_anomalies[].source_metadata.source_resource_name

The name of the anomaly's resource.

proactive_anomalies[].source_metadata.source_resource_type

The anomaly's resource type.

proactive_anomalies[].status

The status of the anomaly.

proactive_anomalies[].update_time

The time of the anomaly's most recent update.

reactive_anomalies

An array of ReactiveAnomalySummary objects that represent the requested anomalies

STRUCT(
"id" VARCHAR,
"severity" VARCHAR,
"status" VARCHAR,
"anomaly_time_range" STRUCT(
"start_time" TIMESTAMP_S,
"end_time" TIMESTAMP_S
),
"anomaly_reported_time_range" STRUCT(
"open_time" TIMESTAMP_S,
"close_time" TIMESTAMP_S
),
"source_details" STRUCT(
"cloud_watch_metrics" STRUCT(
"metric_name" VARCHAR,
"namespace" VARCHAR,
"dimensions" STRUCT(
"name" VARCHAR,
"value" VARCHAR
)[],
"stat" VARCHAR,
"unit" VARCHAR,
"period" BIGINT,
"metric_data_summary" STRUCT(
"timestamp_metric_value_pair_list" STRUCT(
"timestamp" TIMESTAMP_S,
"metric_value" DOUBLE
)[],
"status_code" VARCHAR
)
)[],
"performance_insights_metrics" STRUCT(
"metric_display_name" VARCHAR,
"unit" VARCHAR,
"metric_query" STRUCT(
"metric" VARCHAR,
"group_by" STRUCT(
"group" VARCHAR,
"dimensions" VARCHAR[],
"limit" BIGINT
),
"filter" MAP(VARCHAR, VARCHAR)
),
"reference_data" STRUCT(
"name" VARCHAR,
"comparison_values" STRUCT(
"reference_scalar" STRUCT(
"value" DOUBLE
),
"reference_metric" STRUCT(
"metric_query" STRUCT(
"metric" VARCHAR,
"group_by" STRUCT(
"group" VARCHAR,
"dimensions" VARCHAR[],
"limit" BIGINT
),
"filter" MAP(VARCHAR, VARCHAR)
)
)
)
)[],
"stats_at_anomaly" STRUCT(
"type" VARCHAR,
"value" DOUBLE
)[],
"stats_at_baseline" STRUCT(
"type" VARCHAR,
"value" DOUBLE
)[]
)[]
),
"associated_insight_id" VARCHAR,
"resource_collection" STRUCT(
"cloud_formation" STRUCT(
"stack_names" VARCHAR[]
),
"tags" STRUCT(
"app_boundary_key" VARCHAR,
"tag_values" VARCHAR[]
)[]
),
"type" VARCHAR,
"name" VARCHAR,
"description" VARCHAR,
"causal_anomaly_id" VARCHAR,
"anomaly_resources" STRUCT(
"name" VARCHAR,
"type" VARCHAR
)[]
)[]
Show child fields
reactive_anomalies[]
Show child fields
reactive_anomalies[].anomaly_reported_time_range

An AnomalyReportedTimeRange object that specifies the time range between when the anomaly is opened and the time when it is closed.

Show child fields
reactive_anomalies[].anomaly_reported_time_range.close_time

The time when an anomaly is closed.

reactive_anomalies[].anomaly_reported_time_range.open_time

The time when an anomaly is opened.

reactive_anomalies[].anomaly_resources[]
Show child fields
reactive_anomalies[].anomaly_resources[].name

The name of the Amazon Web Services resource.

reactive_anomalies[].anomaly_resources[].type

The type of the Amazon Web Services resource.

reactive_anomalies[].anomaly_time_range

A time range that specifies when the observed unusual behavior in an anomaly started and ended. This is different from AnomalyReportedTimeRange, which specifies the time range when DevOps Guru opens and then closes an anomaly.

Show child fields
reactive_anomalies[].anomaly_time_range.end_time

The time when the anomalous behavior ended.

reactive_anomalies[].anomaly_time_range.start_time

The time when the anomalous behavior started.

reactive_anomalies[].associated_insight_id

The ID of the insight that contains this anomaly. An insight is composed of related anomalies.

reactive_anomalies[].causal_anomaly_id

The ID of the causal anomaly that is associated with this reactive anomaly. The ID of a `CAUSAL` anomaly is always `NULL`.

reactive_anomalies[].description

A description of the reactive anomaly.

reactive_anomalies[].id

The ID of the reactive anomaly.

reactive_anomalies[].name

The name of the reactive anomaly.

reactive_anomalies[].resource_collection

A collection of Amazon Web Services resources supported by DevOps Guru. The two types of Amazon Web Services resource collections supported are Amazon Web Services CloudFormation stacks and Amazon Web Services resources that contain the same Amazon Web Services tag. DevOps Guru can be configured to analyze the Amazon Web Services resources that are defined in the stacks or that are tagged using the same tag key. You can specify up to 500 Amazon Web Services CloudFormation stacks.

Show child fields
reactive_anomalies[].resource_collection.cloud_formation

An array of the names of Amazon Web Services CloudFormation stacks. The stacks define Amazon Web Services resources that DevOps Guru analyzes. You can specify up to 500 Amazon Web Services CloudFormation stacks.

Show child fields
reactive_anomalies[].resource_collection.cloud_formation.stack_names[]
reactive_anomalies[].resource_collection.tags[]
Show child fields
reactive_anomalies[].resource_collection.tags[].app_boundary_key

An Amazon Web Services tag key that is used to identify the Amazon Web Services resources that DevOps Guru analyzes. All Amazon Web Services resources in your account and Region tagged with this key make up your DevOps Guru application and analysis boundary.

The string used for a key in a tag that you use to define your resource coverage must begin with the prefix Devops-guru-. The tag key might be DevOps-Guru-deployment-application or devops-guru-rds-application. When you create a key, the case of characters in the key can be whatever you choose. After you create a key, it is case-sensitive. For example, DevOps Guru works with a key named devops-guru-rds and a key named DevOps-Guru-RDS, and these act as two different keys. Possible key/value pairs in your application might be Devops-Guru-production-application/RDS or Devops-Guru-production-application/containers.

reactive_anomalies[].resource_collection.tags[].tag_values[]
reactive_anomalies[].severity

The severity of the anomaly. The severity of anomalies that generate an insight determine that insight's severity. For more information, see Understanding insight severities in the Amazon DevOps Guru User Guide.

reactive_anomalies[].source_details

Details about the source of the analyzed operational data that triggered the anomaly. The one supported source is Amazon CloudWatch metrics.

Show child fields
reactive_anomalies[].source_details.cloud_watch_metrics[]
Show child fields
reactive_anomalies[].source_details.cloud_watch_metrics[].dimensions[]
Show child fields
reactive_anomalies[].source_details.cloud_watch_metrics[].dimensions[].name

The name of the CloudWatch dimension.

reactive_anomalies[].source_details.cloud_watch_metrics[].dimensions[].value

The value of the CloudWatch dimension.

reactive_anomalies[].source_details.cloud_watch_metrics[].metric_data_summary

This object returns anomaly metric data.

Show child fields
reactive_anomalies[].source_details.cloud_watch_metrics[].metric_data_summary.status_code

This is an enum of the status showing whether the metric value pair list has partial or complete data, or if there was an error.

reactive_anomalies[].source_details.cloud_watch_metrics[].metric_data_summary.timestamp_metric_value_pair_list[]
Show child fields
reactive_anomalies[].source_details.cloud_watch_metrics[].metric_data_summary.timestamp_metric_value_pair_list[].metric_value

Value of the anomalous metric data point at respective Timestamp.

reactive_anomalies[].source_details.cloud_watch_metrics[].metric_data_summary.timestamp_metric_value_pair_list[].timestamp

A Timestamp that specifies the time the event occurred.

reactive_anomalies[].source_details.cloud_watch_metrics[].metric_name

The name of the CloudWatch metric.

reactive_anomalies[].source_details.cloud_watch_metrics[].namespace

The namespace of the CloudWatch metric. A namespace is a container for CloudWatch metrics.

reactive_anomalies[].source_details.cloud_watch_metrics[].period

The length of time associated with the CloudWatch metric in number of seconds.

reactive_anomalies[].source_details.cloud_watch_metrics[].stat

The type of statistic associated with the CloudWatch metric. For more information, see Statistics in the Amazon CloudWatch User Guide.

reactive_anomalies[].source_details.cloud_watch_metrics[].unit

The unit of measure used for the CloudWatch metric. For example, Bytes, Seconds, Count, and Percent.

reactive_anomalies[].source_details.performance_insights_metrics[]
Show child fields
reactive_anomalies[].source_details.performance_insights_metrics[].metric_display_name

The name used for a specific Performance Insights metric.

reactive_anomalies[].source_details.performance_insights_metrics[].metric_query

A single query to be processed for the metric. For more information, see PerformanceInsightsMetricQuery .

Show child fields
reactive_anomalies[].source_details.performance_insights_metrics[].metric_query.filter

One or more filters to apply to a Performance Insights GetResourceMetrics API query. Restrictions:

  • Any number of filters by the same dimension, as specified in the GroupBy parameter.

  • A single filter for any other dimension in this dimension group.

reactive_anomalies[].source_details.performance_insights_metrics[].metric_query.group_by

The specification for how to aggregate the data points from a Performance Insights GetResourceMetrics API query. The Performance Insights query returns all of the dimensions within that group, unless you provide the names of specific dimensions within that group. You can also request that Performance Insights return a limited number of values for a dimension.

Show child fields
reactive_anomalies[].source_details.performance_insights_metrics[].metric_query.group_by.dimensions[]
reactive_anomalies[].source_details.performance_insights_metrics[].metric_query.group_by.group

The name of the dimension group. Its valid values are:

  • db - The name of the database to which the client is connected (only Aurora PostgreSQL, Amazon RDS PostgreSQL, Aurora MySQL, Amazon RDS MySQL, and MariaDB)

  • db.application - The name of the application that is connected to the database (only Aurora PostgreSQL and RDS PostgreSQL)

  • db.host - The host name of the connected client (all engines)

  • db.session_type - The type of the current session (only Aurora PostgreSQL and RDS PostgreSQL)

  • db.sql - The SQL that is currently executing (all engines)

  • db.sql_tokenized - The SQL digest (all engines)

  • db.wait_event - The event for which the database backend is waiting (all engines)

  • db.wait_event_type - The type of event for which the database backend is waiting (all engines)

  • db.user - The user logged in to the database (all engines)

reactive_anomalies[].source_details.performance_insights_metrics[].metric_query.group_by.limit

The maximum number of items to fetch for this dimension group.

reactive_anomalies[].source_details.performance_insights_metrics[].metric_query.metric

The name of the meteric used used when querying an Performance Insights GetResourceMetrics API for anomaly metrics.

Valid values for Metric are:

  • db.load.avg - a scaled representation of the number of active sessions for the database engine.

  • db.sampledload.avg - the raw number of active sessions for the database engine.

If the number of active sessions is less than an internal Performance Insights threshold, db.load.avg and db.sampledload.avg are the same value. If the number of active sessions is greater than the internal threshold, Performance Insights samples the active sessions, with db.load.avg showing the scaled values, db.sampledload.avg showing the raw values, and db.sampledload.avg less than db.load.avg. For most use cases, you can query db.load.avg only.

reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[]
Show child fields
reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values

The specific reference values used to evaluate the Performance Insights. For more information, see PerformanceInsightsReferenceComparisonValues .

Show child fields
reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric

A metric that DevOps Guru compares to actual metric values. This reference metric is used to determine if an actual metric should be considered anomalous.

Show child fields
reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query

A query to be processed on the metric.

Show child fields
reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.filter

One or more filters to apply to a Performance Insights GetResourceMetrics API query. Restrictions:

  • Any number of filters by the same dimension, as specified in the GroupBy parameter.

  • A single filter for any other dimension in this dimension group.

reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.group_by

The specification for how to aggregate the data points from a Performance Insights GetResourceMetrics API query. The Performance Insights query returns all of the dimensions within that group, unless you provide the names of specific dimensions within that group. You can also request that Performance Insights return a limited number of values for a dimension.

Show child fields
reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.group_by.dimensions[]
reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.group_by.group

The name of the dimension group. Its valid values are:

  • db - The name of the database to which the client is connected (only Aurora PostgreSQL, Amazon RDS PostgreSQL, Aurora MySQL, Amazon RDS MySQL, and MariaDB)

  • db.application - The name of the application that is connected to the database (only Aurora PostgreSQL and RDS PostgreSQL)

  • db.host - The host name of the connected client (all engines)

  • db.session_type - The type of the current session (only Aurora PostgreSQL and RDS PostgreSQL)

  • db.sql - The SQL that is currently executing (all engines)

  • db.sql_tokenized - The SQL digest (all engines)

  • db.wait_event - The event for which the database backend is waiting (all engines)

  • db.wait_event_type - The type of event for which the database backend is waiting (all engines)

  • db.user - The user logged in to the database (all engines)

reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.group_by.limit

The maximum number of items to fetch for this dimension group.

reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_metric.metric_query.metric

The name of the meteric used used when querying an Performance Insights GetResourceMetrics API for anomaly metrics.

Valid values for Metric are:

  • db.load.avg - a scaled representation of the number of active sessions for the database engine.

  • db.sampledload.avg - the raw number of active sessions for the database engine.

If the number of active sessions is less than an internal Performance Insights threshold, db.load.avg and db.sampledload.avg are the same value. If the number of active sessions is greater than the internal threshold, Performance Insights samples the active sessions, with db.load.avg showing the scaled values, db.sampledload.avg showing the raw values, and db.sampledload.avg less than db.load.avg. For most use cases, you can query db.load.avg only.

reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_scalar

A scalar value DevOps Guru for a metric that DevOps Guru compares to actual metric values. This reference value is used to determine if an actual metric value should be considered anomalous.

Show child fields
reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].comparison_values.reference_scalar.value

The reference value.

reactive_anomalies[].source_details.performance_insights_metrics[].reference_data[].name

The name of the reference data.

reactive_anomalies[].source_details.performance_insights_metrics[].stats_at_anomaly[]
Show child fields
reactive_anomalies[].source_details.performance_insights_metrics[].stats_at_anomaly[].type

The statistic type.

reactive_anomalies[].source_details.performance_insights_metrics[].stats_at_anomaly[].value

The value of the statistic.

reactive_anomalies[].source_details.performance_insights_metrics[].stats_at_baseline[]
Show child fields
reactive_anomalies[].source_details.performance_insights_metrics[].stats_at_baseline[].type

The statistic type.

reactive_anomalies[].source_details.performance_insights_metrics[].stats_at_baseline[].value

The value of the statistic.

reactive_anomalies[].source_details.performance_insights_metrics[].unit

The unit of measure for a metric. For example, a session or a process.

reactive_anomalies[].status

The status of the reactive anomaly.

reactive_anomalies[].type

The type of the reactive anomaly. It can be one of the following types.

  • CAUSAL - the anomaly can cause a new insight.

  • CONTEXTUAL - the anomaly contains additional information about an insight or its causal anomaly.