Updated on 2025-07-11 GMT+08:00

AAD Event Metrics

Description

Cloud Eye can monitor AAD events and generate alarms when events such as black hole, scheduling, and attacks occur. It helps you learn about the protection status of AAD in a timely manner.

After the event alarm notification function is enabled, you can view event details on the Event Monitoring page of the Cloud Eye console when an event occurs.

Namespace

SYS.DDOS

Monitored Events

Table 1 Monitored events

Event Name

ID

Severity

Description

Handling Suggestions

Impact

Blackhole events

blackHoleEvents

Major

The attack traffic exceeds the purchased AAD protection threshold.

For details, see Huawei Cloud Blackhole Policy.

Services may be affected.

Recovery

cancelBlackHole

Informational

The AAD instance recovers from the blackhole status.

No operation is required.

Service recovery

Domain name scheduling event

domainNameDispatchEvents

Major

The high-defense CNAME corresponding to the domain name is scheduled, and the domain name is resolved to another high-defense IP address.

Check the workloads involving the domain name.

Services are not affected.

DDoS Attack Events

ddosAttackEvents

Major

A DDoS attack occurs in the AAD protected lines.

Change the line or increase the protection bandwidth, if the attack traffic exceeds the elastic protection bandwidth.

Services may be affected.