Huawei Cloud WAF Web Application Firewall

Collect Huawei Cloud WAF Metrics data

Configuration¶

Install Func¶

It is recommended to activate the TrueWatch integration - extension - DataFlux Func (Automata): all prerequisites are automatically installed, please proceed with the script installation

If you deploy Func by yourself, refer to Self-deploy Func

Install Script¶

Note: Please prepare the Huawei Cloud AK in advance (for simplicity, you can directly grant global read-only permissions ReadOnlyAccess)

1. Log in to the Func console, click 【Script Market】, enter the TrueWatch script market, and search for ID: integration_huaweicloud_waf

2. Click 【Install】, then enter the corresponding parameters: Huawei Cloud AK, SK, and account name

3. Click 【Deploy Startup Script】, the system will automatically create the Startup script set and configure the corresponding startup script

4. After enabling, you can see the corresponding automatic trigger configuration in 「Manage / Automatic Trigger Configuration」. Click 【Execute】 to execute it immediately without waiting for the scheduled time. After a while, you can check the execution task records and corresponding logs

Verification¶

1. In 「Manage / Automatic Trigger Configuration」, confirm whether the corresponding task has the corresponding automatic trigger configuration, and you can also check the corresponding task records and logs to see if there are any exceptions
2. In TrueWatch, check if there is asset information in 「Infrastructure / Custom」
3. In TrueWatch, check if there is corresponding monitoring data in 「Metrics」

Metrics¶

Collect Huawei Cloud WAF Metrics, you can collect more Metrics through configuration Huawei Cloud WAF Metrics Details

Object¶

The collected Huawei Cloud WAF object data structure can be seen in 「Infrastructure - Custom」.

{
  "measurement": "huaweicloud_waf",
  "tags": {
    "RegionId"          : "cn-south-1",
    "hostname"          : "xxxxxxxxx.cn",
    "id"                : "9c877f3c83594d10af5aec52bcc1c707",
    "paid_type"         : "prePaid",
    "project_id"        : "756ada1aa17e4049b2a16ea41912e52d"
  },
  "fields": {
    "flag"              : "[JSON data]",
    "proxy"             : "False",
    "timestamp"         : "1731653371361",
    "protect_status"    : "1",
    "access_status"     : "1",
    "exclusive_ip"      : "False",
    "web_tag"           : "waf"
  }
}

Note: The fields in tags, fields may change with subsequent updates

Note: The id value is the protected domain ID, used as a unique identifier