-7dnowEC2 and EBSRunning EC2 Instances$earliest$$latest$
instance_usage?form.accountId=$form.accountId$®ions=$form.region$&form.tags=$tags$&latest=$latest$&earliest=$earliest$
In-Use EBS Volumes$earliest$$latest$
ebs_usage?form.accountId=$form.accountId$®ions=$form.region$&form.tags=$tags$&latest=$latest$&earliest=$earliest$
In-Use EBS Volume Size$earliest$$latest$
ebs_usage?form.accountId=$form.accountId$®ions=$form.region$&form.tags=$tags$&latest=$latest$&earliest=$earliest$
EBS Snapshots Size$earliest$$latest$
ebs_usage?form.accountId=$form.accountId$®ions=$form.region$&form.tags=$tags$&latest=$latest$&earliest=$earliest$
ELBTotal ELBs-1dnow
elb_usage?form.accountId=$form.accountId$®ions=$form.region$&latest=$latest$&earliest=$earliest$
Total Requests - Last 7 Days-13dnow
elb_usage?form.accountId=$form.accountId$®ions=$form.region$&latest=$latest$&earliest=$earliest$
Unhealthy EC2 Instances
[^,]+),(?[^,]+)"
| dedup instance_id
| stats count(instance_id) as total, count(eval(instance_state="OutOfService")) as count
| append [search `aws-metadata-alb($accountId$, $region$)`
| eval targets=mvzip('TargetGroups{}.TargetHealthDescriptions{}.Target.Id', 'TargetGroups{}.TargetHealthDescriptions{}.TargetHealth.State')
| fields - _raw
| mvexpand targets
| rex field=targets "(?[^,]+),(?[^,]+)"
| dedup instance_id
| stats count(instance_id) as total, count(eval(instance_state!="healthy")) as count ]
| stats sum(total) as total, sum(count) as count
| nadefault total count
| eval _total_name="EC2 Instances", _total_field=total
]]>
-1dnowELB Error Requests - Last 7 Days-13dnow
elb_usage?form.accountId=$form.accountId$®ions=$form.region$&latest=$latest$&earliest=$earliest$
Max CPU Utilization - Last 7 Days Top 5
.+)\""
| rename InstanceId as id ,InstanceType as instance_type, tagname as tags.Name
| fields id, instance_type, region, tags.Name]
| table id, tags.Name, instance_type, region, cpu_util, ave_cpu_util
| fillnull value=N/A
| sort 5 -num(ave_cpu_util)
| lookup regions region OUTPUT label as region
| rename id as ID, tags.Name as Name, instance_type as Type, region as Region, cpu_util as "CPU Util.", ave_cpu_util as "Avg. CPU Util."
]]>
individual_instance_usage?form.instances=$row.ID$&form.accountId=$form.accountId$®ions=$form.region$&latest=$latest$&earliest=$earliest$
Min CPU Utilization - Last 7 Days Top 5
.+)\""
| rename InstanceId as id ,InstanceType as instance_type, tagname as tags.Name
| fields id, instance_type, region, tags.Name]
| table id, tags.Name, instance_type, region, cpu_util, ave_cpu_util
| fillnull value=N/A
| sort 5 num(ave_cpu_util)
| lookup regions region OUTPUT label as region
| rename id as ID, tags.Name as Name, instance_type as Type, region as Region, cpu_util as "CPU Util.", ave_cpu_util as "Avg. CPU Util."
]]>
individual_instance_usage?form.instances=$row.ID$&form.accountId=$form.accountId$®ions=$form.region$&latest=$latest$&earliest=$earliest$