Integrating Detailed Kubernetes Networking Flow Logs in CloudWatch

Now that we have policies installed, and traffic being generated in the cluster, we can look at the CloudWatch integration that TSCE provides.

We’re assuming that you have run through both the Calico section of this tutorial and the first part of the TSCE section. If you skipped the Calico section, please go back and run through that as well, as we are relying on the synthetic applications used in the Calico examples to generate flowlogs in CloudWatch.

Selecting out cluster in CloudWatch

You need to get the clusterGUID of the EKS cluster. To do that, run the following command:

kubectl get clusterinformation default -o yaml | grep GUID

In the cloud9 shell, go to the AWS dashboard, and select the Cloudwatch service.

Viewing and graphing metrics

Go to the metrics section, and select all of the metrics being reported by your clusterID. See the screenshot below

Just as in the screenshot, you should now see CloudWatch graphing various statistics such as denied packets, unhealthy nodes, etc.

Viewing the flow logs

Similarly, you can see the actual flow logs by switching from the Metrics to the Logs view, as shown below