AAD Event Metrics

Description

Cloud Eye can monitor AAD events and generate alarms when events such as black hole, scheduling, and attacks occur. It helps you learn about the protection status of AAD in a timely manner.

After the event alarm notification function is enabled, you can view event details on the Event Monitoring page of the Cloud Eye console when an event occurs.

Namespace

SYS.DDOS

Monitored Events

**Table 1** Monitored events
Event Name	ID	Severity	Description	Handling Suggestions	Impact
Blackhole events	blackHoleEvents	Major	The attack traffic exceeds the purchased AAD protection threshold.	For details, see Huawei Cloud Blackhole Policy.	Services may be affected.
Recovery	cancelBlackHole	Informational	The AAD instance recovers from the blackhole status.	No operation is required.	Service recovery
Domain name scheduling event	domainNameDispatchEvents	Major	The high-defense CNAME corresponding to the domain name is scheduled, and the domain name is resolved to another high-defense IP address.	Check the workloads involving the domain name.	Services are not affected.
DDoS Attack Events	ddosAttackEvents	Major	A DDoS attack occurs in the AAD protected lines.	Change the line or increase the protection bandwidth, if the attack traffic exceeds the elastic protection bandwidth.	Services may be affected.