Skip to main content
Version: Cloud

Monitor Elastic Load Balancer Logs

Description :

This plugin captures the logs for all 3 kind of ELB's (Application, Network, Classic) based on predefined logs format.

ELBLogs plugin captures logs for Application, Network, Classic:

Above all respective logs can be visualized in SnappyFlow Dashboard and can be observed.

Pre-requisites :

  • User should have a API Access Key and API Secret Key for AWS Account.
  • User should have ELB with enabled access logs in some s3 bucket.

Configuration Settings

Select the ELBLogs plugin from the dropdown under Plugins tab and find following elb logs type as document(any one):

  • cloudwatch-network
  • cloudwatch-classic
  • cloudwatch-application


All Test metrics are collected and tagged based on their document type (application, network or classic).

List of Document Types :

  • For Application ELB :

    • Description : type(htttp/https/ws/h2/wss) time elb client:port target:port request_processing_time target_processing_time response_processing_time elb_status_code target_status_code received_bytes sent_bytes "request" "user_agent" ssl_cipher ssl_protocol target_group_arn "trace_id" "domain_name" "chosen_cert_arn" matched_rule_priority request_creation_time "actions_executed" "redirect_url" "redirect_url" "target:port_list" "target_status_code_list" "classification" "classification_reason"
    • Example : https 2020-10-09T04:41:37.394713Z app/apm-demo/5ce576ca9784a513 0.000 0.006 0.000 200 200 818 333 "POST HTTP/1.1" "Go-http-client/1.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-west-2:159750416379:targetgroup/apm-demo/379f70084715403e "Root=1-5f7fea01-6b7fdf585250ebde5b26b2ab" "" "arn:aws:iam::159750416379:server-certificate/apm-demo" 0 2020-10-09T04:41:37.388000Z "forward" "-" "-" "" "200" "-" "-"
  • For Classic ELB :

    • Description : timestamp elb client:port backend:port request_processing_time backend_processing_time response_processing_time elb_status_code backend_status_code received_bytes sent_bytes "request" "user_agent" ssl_cipher ssl_protocol
    • Example : 2015-05-13T23:39:43.945958Z my-loadbalancer 0.000086 0.001048 0.001337 200 200 0 57 "GET HTTP/1.1" "curl/7.38.0" DHE-RSA-AES128-SHA TLSv1.2
  • For Network ELB :

    • Description : type(tls) version time elb listener client:port destination:port connection_time(ms) tls_handshake_time received_bytes sent_bytes incoming_tls_alert chosen_cert_arn chosen_cert_serial tls_cipher tls_protocol_version tls_named_group domain_name alpn_fe_protocol alpn_be_protocol alpn_client_preference_list
    • Example : tls 2.0 2018-12-20T02:59:40 net/my-network-loadbalancer/c6e77e28c25b2234 g3d4b5e8bb8464cd 5 2 98 246 -arn:aws:acm:us-east-2:671290407336:certificate/2a108f19-aded-46b0-8493-c63eb1ef4a99 - ECDHE-RSA-AES128-SHA tlsv12 -

For help with plugins, please reach out to