After installing and configuring the Amazon CloudWatch agent on an EC2 instance, the anticipated system logs are not being received by CloudWatch Logs. Which of the following are likely to be the cause of this problem? (Choose two.)
A.
A custom of third-party solution for logs is being used.
B.
The IAM role attached to the EC2 instance does not have the proper permissions.
C.
The CloudWatch agent does not support the operating system used.
D.
A billing constraint is limiting the number of CloudWatch Logs within this account.
E.
The EC2 instance is in a private subnet, and the VPC does not have a NAT gateway.
Correct Answers: B & E
as @RicardoD said:
After installing the CW agent, make sure you give permissions to EC2 to publish the readings on CW (B) and if you are not using any VPC endpoint to internally route the signal do CW, then you will need a path to the internet (E)
It should be B & C,
you don't need NAT for CW, you only need a private VPC endpoint,
and the question is about updating an instance, which means VPC wasn't changed.
The CloudWatch agent is supported on x86-64 architecture on the following operating systems:
Amazon Linux version 2014.03.02 or later
Amazon Linux 2
Ubuntu Server versions 20.04, 18.04, 16.04, and 14.04
CentOS versions 8.0, 7.6, 7.2, and 7.0
Red Hat Enterprise Linux (RHEL) versions 8, 7.7, 7.6, 7.5, 7.4, 7.2, and 7.0
Debian version 10 and version 8.0
SUSE Linux Enterprise Server (SLES) version 15 and version 12
Oracle Linux versions 7.8, 7.6, and 7.5
macOS, including EC2 Mac1 instances
64-bit versions of Windows Server 2019, Windows Server 2016, Windows Server 2012, and Windows Server 2008 R2
B & E is correct
Please refer to this link:
https://aws.amazon.com/premiumsupport/knowledge-center/push-log-data-cloudwatch-awslogs/
Resolution
Before you begin, confirm that the awslogs agent is able to connect to the CloudWatch Logs API endpoint.
Be sure that your configuration has:
Internet connectivity (NAT GW is necessary since the instance is in a private subnet)
Valid security group configurations
Valid network access control lists (network ACLs)
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
TroyMcLure
Highly Voted 1 year agoantthomas
Most Recent 10 months agomisako
1 year agoTroyMcLure
12 months agokrishna2812
1 year, 1 month ago