Skip to content
AWS for Query.Farm

aws.internetmonitor.get_health_event

Example SQL Queries

SELECT * FROM
aws.internetmonitor.get_health_event
WHERE
"monitor_name" = 'VALUE'
AND "event_id" = 'VALUE';

Description

Gets information that Amazon CloudWatch Internet Monitor has created and stored about a health event for a specified monitor. This information includes the impacted locations, and all the information related to the event, by location.

The information returned includes the impact on performance, availability, and round-trip time, information about the network providers (ASNs), the event type, and so on.

Information rolled up at the global traffic level is also returned, including the impact type and total traffic impact.

Table Definition

Column NameColumn Data Type
event_id Required Input Column

The internally-generated identifier of a health event.

VARCHAR
monitor_name Required Input Column

The name of the monitor.

VARCHAR
linked_account_id Input Column

The account ID for an account that you've set up cross-account sharing for in Amazon CloudWatch Internet Monitor. You configure cross-account sharing by using Amazon CloudWatch Observability Access Manager. For more information, see Internet Monitor cross-account observability in the Amazon CloudWatch Internet Monitor User Guide.

VARCHAR
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
    "type" VARCHAR,
    "name" VARCHAR,
    "account_id" VARCHAR,
    "via_profile_name" VARCHAR,
    "assumed_role_arn" VARCHAR,
    "organization" STRUCT(
        "account_name" VARCHAR,
        "id" VARCHAR,
        "tags" STRUCT(
            "key" VARCHAR,
            "value" VARCHAR
        )[],
        "master_account" STRUCT(
            "id" VARCHAR,
            "email" VARCHAR
        ),
        "parents" STRUCT(
            "type" VARCHAR,
            "id" VARCHAR,
            "name" VARCHAR,
            "tags" STRUCT(
                "key" VARCHAR,
                "value" VARCHAR
            )[]
        )[]
    )
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
created_at

The time when a health event was created.

TIMESTAMP_S
ended_at

The time when a health event was resolved. If the health event is still active, the end time is not set.

TIMESTAMP_S
event_arn

The Amazon Resource Name (ARN) of the event.

VARCHAR
health_score_threshold

The threshold percentage for a health score that determines, along with other configuration information, when Internet Monitor creates a health event when there's an internet issue that affects your application end users.

DOUBLE
impact_type

The type of impairment of a specific health event.

VARCHAR
impacted_locations

The locations affected by a health event.

STRUCT(
    "as_name" VARCHAR,
    "as_number" BIGINT,
    "country" VARCHAR,
    "subdivision" VARCHAR,
    "metro" VARCHAR,
    "city" VARCHAR,
    "latitude" DOUBLE,
    "longitude" DOUBLE,
    "country_code" VARCHAR,
    "subdivision_code" VARCHAR,
    "service_location" VARCHAR,
    "status" VARCHAR,
    "caused_by" STRUCT(
        "networks" STRUCT(
            "as_name" VARCHAR,
            "as_number" BIGINT
        )[],
        "as_path" STRUCT(
            "as_name" VARCHAR,
            "as_number" BIGINT
        )[],
        "network_event_type" VARCHAR
    ),
    "internet_health" STRUCT(
        "availability" STRUCT(
            "experience_score" DOUBLE,
            "percent_of_total_traffic_impacted" DOUBLE,
            "percent_of_client_location_impacted" DOUBLE
        ),
        "performance" STRUCT(
            "experience_score" DOUBLE,
            "percent_of_total_traffic_impacted" DOUBLE,
            "percent_of_client_location_impacted" DOUBLE,
            "round_trip_time" STRUCT(
                "p50" DOUBLE,
                "p90" DOUBLE,
                "p95" DOUBLE
            )
        )
    ),
    "ipv4_prefixes" VARCHAR[]
)[]
Show child fields
impacted_locations[]
Show child fields
impacted_locations[].as_name

The name of the internet service provider (ISP) or network (ASN).

impacted_locations[].as_number

The Autonomous System Number (ASN) of the network at an impacted location.

impacted_locations[].caused_by

The cause of the impairment. There are two types of network impairments: Amazon Web Services network issues or internet issues. Internet issues are typically a problem with a network provider, like an internet service provider (ISP).

Show child fields
impacted_locations[].caused_by.as_path[]
Show child fields
impacted_locations[].caused_by.as_path[].as_name

The name of the internet service provider (ISP) or network (ASN).

impacted_locations[].caused_by.as_path[].as_number

The Autonomous System Number (ASN) of the internet provider or network.

impacted_locations[].caused_by.network_event_type

The type of network impairment.

impacted_locations[].caused_by.networks[]
Show child fields
impacted_locations[].caused_by.networks[].as_name

The name of the internet service provider (ISP) or network (ASN).

impacted_locations[].caused_by.networks[].as_number

The Autonomous System Number (ASN) of the internet provider or network.

impacted_locations[].city

The name of the city where the health event is located.

impacted_locations[].country

The name of the country where the health event is located.

impacted_locations[].country_code

The country code where the health event is located. The ISO 3166-2 codes for the country is provided, when available.

impacted_locations[].internet_health

The calculated health at a specific location.

Show child fields
impacted_locations[].internet_health.availability

Availability in Internet Monitor represents the estimated percentage of traffic that is not seeing an availability drop. For example, an availability score of 99% for an end user and service location pair is equivalent to 1% of the traffic experiencing an availability drop for that pair.

For more information, see How Internet Monitor calculates performance and availability scores in the Amazon CloudWatch Internet Monitor section of the CloudWatch User Guide.

Show child fields
impacted_locations[].internet_health.availability.experience_score

Experience scores, or health scores are calculated for different geographic and network provider combinations (that is, different granularities) and also summed into global scores. If you view performance or availability scores without filtering for any specific geography or service provider, Amazon CloudWatch Internet Monitor provides global health scores.

The Amazon CloudWatch Internet Monitor chapter in the CloudWatch User Guide includes detailed information about how Internet Monitor calculates health scores, including performance and availability scores, and when it creates and resolves health events. For more information, see How Amazon Web Services calculates performance and availability scores in the Amazon CloudWatch Internet Monitor section of the CloudWatch User Guide.

impacted_locations[].internet_health.availability.percent_of_client_location_impacted

The percentage of impact caused by a health event for client location traffic globally.

For information about how Internet Monitor calculates impact, see Inside Internet Monitor in the Amazon CloudWatch Internet Monitor section of the Amazon CloudWatch User Guide.

impacted_locations[].internet_health.availability.percent_of_total_traffic_impacted

The impact on total traffic that a health event has, in increased latency or reduced availability. This is the percentage of how much latency has increased or availability has decreased during the event, compared to what is typical for traffic from this client location to the Amazon Web Services location using this client network.

For information about how Internet Monitor calculates impact, see How Internet Monitor works in the Amazon CloudWatch Internet Monitor section of the Amazon CloudWatch User Guide.

impacted_locations[].internet_health.performance

Performance in Internet Monitor represents the estimated percentage of traffic that is not seeing a performance drop. For example, a performance score of 99% for an end user and service location pair is equivalent to 1% of the traffic experiencing a performance drop for that pair.

For more information, see How Internet Monitor calculates performance and availability scores in the Amazon CloudWatch Internet Monitor section of the CloudWatch User Guide.

Show child fields
impacted_locations[].internet_health.performance.experience_score

Experience scores, or health scores, are calculated for different geographic and network provider combinations (that is, different granularities) and also totaled into global scores. If you view performance or availability scores without filtering for any specific geography or service provider, Amazon CloudWatch Internet Monitor provides global health scores.

The Amazon CloudWatch Internet Monitor chapter in the CloudWatch User Guide includes detailed information about how Internet Monitor calculates health scores, including performance and availability scores, and when it creates and resolves health events. For more information, see How Amazon Web Services calculates performance and availability scores in the Amazon CloudWatch Internet Monitor section of the CloudWatch User Guide.

impacted_locations[].internet_health.performance.percent_of_client_location_impacted

How much performance impact was caused by a health event at a client location. For performance, this is the percentage of how much latency increased during the event compared to typical performance for traffic, from this client location to an Amazon Web Services location, using a specific client network.

For more information, see When Amazon Web Services creates and resolves health events in the Amazon CloudWatch Internet Monitor section of the CloudWatch User Guide.

impacted_locations[].internet_health.performance.percent_of_total_traffic_impacted

The impact on total traffic that a health event has, in increased latency or reduced availability. This is the percentage of how much latency has increased or availability has decreased during the event, compared to what is typical for traffic from this client location to the Amazon Web Services location using this client network.

For more information, see When Amazon Web Services creates and resolves health events in the Amazon CloudWatch Internet Monitor section of the CloudWatch User Guide.

impacted_locations[].internet_health.performance.round_trip_time

This is the percentage of how much round-trip time increased during the event compared to typical round-trip time for your application for traffic.

For more information, see When Amazon Web Services creates and resolves health events in the Amazon CloudWatch Internet Monitor section of the CloudWatch User Guide.

Show child fields
impacted_locations[].internet_health.performance.round_trip_time.p50

RTT at the 50th percentile (p50).

impacted_locations[].internet_health.performance.round_trip_time.p90

RTT at the 90th percentile (p90).

impacted_locations[].internet_health.performance.round_trip_time.p95

RTT at the 95th percentile (p95).

impacted_locations[].ipv4_prefixes[]
impacted_locations[].latitude

The latitude where the health event is located.

impacted_locations[].longitude

The longitude where the health event is located.

impacted_locations[].metro

The metro area where the health event is located.

Metro indicates a metropolitan region in the United States, such as the region around New York City. In non-US countries, this is a second-level subdivision. For example, in the United Kingdom, it could be a county, a London borough, a unitary authority, council area, and so on.

impacted_locations[].service_location

The service location where the health event is located.

impacted_locations[].status

The status of the health event at an impacted location.

impacted_locations[].subdivision

The subdivision location where the health event is located. The subdivision usually maps to states in most countries (including the United States). For United Kingdom, it maps to a country (England, Scotland, Wales) or province (Northern Ireland).

impacted_locations[].subdivision_code

The subdivision code where the health event is located. The ISO 3166-2 codes for country subdivisions is provided, when available.

last_updated_at

The time when a health event was last updated or recalculated.

TIMESTAMP_S
percent_of_total_traffic_impacted

The impact on total traffic that a health event has, in increased latency or reduced availability. This is the percentage of how much latency has increased or availability has decreased during the event, compared to what is typical for traffic from this client location to the Amazon Web Services location using this client network.

DOUBLE
started_at

The time when a health event started.

TIMESTAMP_S
status

The status of a health event.

VARCHAR