Skip to content

Collector 'Alibaba Cloud - Web Application Firewall 2.0' Configuration Manual

Before reading this document, please read:

Tip

Before using this collector, you must install the "Integration Core Package" and its accompanying third-party dependencies.

1. Configuration Structure

The configuration structure of this collector is as follows:

Field Type Required Description
regions list Required List of regions to be collected
regions[#] str Required Region ID. For example: 'cn-hangzhou'
See appendix for the complete list

2. Data Reporting Format

After data is successfully synchronized, you can view the data in the "Infrastructure - Resource Catalog" of TrueWatch.

An example of the reported data is as follows:

{
  "measurement": "aliyun_waf",
  "tags": {
    "name"            : "waf-4haczyxxxxx",
    "InstanceId"      : "waf-4haczyzxxxxx",
    "Region"          : "cn",
    "Status"          : "1",
    "SubscriptionType": "Subscription",
    "Version"         : "version_2"
  },
  "fields": {
    "DomainConfigs": "{Domain configuration record protection settings status}",
    "DomainNames": "{List of added domain names}",
    "EndDate": 1669651200,
    "message": "{Instance JSON data}",
  }
}
Note

The fields in tags and fields may change with subsequent updates.

Tip

The value of tags.name is the instance ID, which serves as a unique identifier.

!!! tip

- `fields.message`, `fields.DomainNames`, `fields.DomainConfigs` are JSON serialized strings.

- `tags.SubscriptionType` indicates the billing method of the WAF instance, with values: 1, Subscription indicates annual/monthly subscription; 2, PayAsYouGo indicates pay-as-you-go.

- `tags.Status` indicates the business status of the WAF instance, with values: 0, indicates expired; 1, indicates not expired.

- `tags.Version` indicates the version of the WAF instance, with values detailed in the appendix document.

X. Appendix

Please refer to the official Alibaba Cloud documentation: