Help Center/ Web Application Firewall/ User Guide/ Monitoring and Auditing/ Using Cloud Eye to Monitor WAF/ WAF Monitored Metrics
Updated on 2026-08-21 GMT+08:00
View PDF
Share

WAF Monitored Metrics

Function Description

This topic describes metrics reported by WAF to Cloud Eye as well as their namespaces and dimensions. You can use APIs provided by Cloud Eye to query the metrics of the monitored object and alarms generated for WAF. You can also query them on the Cloud Eye console.

namespaces

SYS.WAF

A namespace is an abstract collection of resources and objects. Multiple namespaces can be created in a single cluster with the data isolated from each other. This enables namespaces to share the same cluster services without affecting each other.

Monitored Metrics for Protected Domain Names

Table 1 Monitored metrics for domain names protected with WAF

Metric ID

Metric Name

Description

Value Range

Unit

Number System

Dimension

Monitored Object

Monitoring Interval (Minute)

requests

Number of Requests

This metric measures the number of requests returned by WAF over the past 5 minutes for the monitored object.

Collection method: The total number of requests for the protected domain name is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_http_2xx

WAF Status Code (2XX)

This metric measures the number of status codes 2XX returned by WAF over the past 5 minutes.

Collection method: The number of 2XX status codes returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5

waf_http_3xx

WAF Status Code (3XX)

This metric measures the number of status codes 3XX returned by WAF over the past 5 minutes.

Collection method: The number of 3XX status codes returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5

waf_http_4xx

WAF Status Code (4XX)

This metric measures the number of status codes 4XX returned by WAF over the past 5 minutes.

Collection method: The number of 4XX status codes returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5

waf_http_5xx

WAF Status Code (5XX)

This metric measures the number of status codes 5XX returned by WAF over the past 5 minutes.

Collection method: The number of 5XX status codes returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5

waf_http_400

WAF Status Code (400)

This metric measures the number of requests with status code 400 returned by WAF over the past 5 minutes.

Collection method: The number of requests with status code 400 returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_http_401

WAF Status Code (401)

This metric measures the number of requests with status code 401 returned by WAF over the past 5 minutes.

Collection method: The number of requests with status code 401 returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_http_403

WAF Status Code (403)

This metric measures the number of requests with status code 403 returned by WAF over the past 5 minutes.

Collection method: The number of requests with status code 403 returned by the monitored WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_http_404

WAF Status Code (404)

This metric measures the number of requests with status code 404 returned by the monitored WAF engine over the past 5 minutes.

Collection method: The number of requests with status code 404 returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_http_405

WAF Status Code (405)

This metric measures the number of requests with status code 405 returned by the monitored WAF engine over the past 5 minutes.

Collection method: The number of requests with status code 405 returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_http_406

WAF Status Code (406)

This metric measures the number of requests with status code 406 returned by WAF for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 406 returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_http_500

WAF Status Code (500)

This metric measures the number of requests with status code 500 returned by WAF for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 500 returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_http_502

WAF Status Code (502)

This metric measures the number of requests with status code 502 returned by WAF for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 502 returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_http_503

WAF Status Code (503)

This metric measures the number of requests with status code 503 returned by WAF for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 503 returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_http_504

WAF Status Code (504)

This metric measures the number of requests with status code 504 returned by WAF for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 504 returned by the WAF engine is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_fused_counts

WAF Traffic Threshold

This metric measures the number of requests destined for the website over the past 5 minutes during break protection duration.

Collection method: The number of requests to the protected domain name while the website was down is counted.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5

inbound_traffic

Total Inbound Traffic

This metric measures the total inbound traffic for the monitored object over the past 5 minutes.

Collection method: The total inbound traffic for the monitored object over the past 5 minutes is calculated.

≥ 0 Mbit/s

Value type: Float

Mbit

1000

waf_instance_id

Protected domain name

5

outbound_traffic

Total Outbound Traffic

This metric measures the total outbound traffic for the monitored object over the past 5 minutes.

Collection method: The number of the total outbound traffic for the monitored object over the past 5 minutes is calculated.

≥ 0 Mbit/s

Value type: Float

Mbit

1000

waf_instance_id

Protected domain name

5

waf_process_time_0

WAF Latency [0-10) ms

This metric collects how many requests are processed by WAF at latencies from 0 ms (included) to 10 ms (excluded) over the past 5 minutes.

Collection method: The number of requests processed by WAF at latencies from 0 ms (included) to 10 ms (excluded) over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_process_time_10

WAF Latency [10-20) ms

This metric collects how many requests are processed by WAF at latencies in the 10 ms to less than 20 ms range over the past 5 minutes.

Collection method: The number of requests processed by WAF at latencies in the 10 ms to less than 20 ms range over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_process_time_20

WAF Latency [20-50) ms

This metric collects how many requests are processed by WAF at latencies from 20 ms (included) to 50 ms (excluded) over the past 5 minutes.

Collection method: The number of requests processed by WAF at latencies from 20 ms (included) to 50 ms (excluded) over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_process_time_50

WAF Latency [50-100) ms

This metric collects how many requests are processed by WAF at latencies from 50 ms (included) to 100 ms (excluded) over the past 5 minutes.

Collection method: The number of requests processed by WAF at latencies from 50 ms (included) to 100 ms (excluded) over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_process_time_100

WAF Latency [100, 1,000) ms

This metric collects how many requests are processed by WAF at latencies from 100 ms (included) to 1,000 ms (excluded) over the past 5 minutes.

Collection method: The number of requests processed by WAF at latencies from 100 ms (included) to 1,000 ms (excluded) over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_process_time_1000

WAF Latency [1,000, above) ms

This metric collects how many requests are processed by WAF at latencies above 1000 ms over the past 5 minutes.

Collection method: The number of requests processed by WAF at latencies above 1000 ms over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

qps_peak

Peak QPS

This metric collects the peak QPS of the domain name over the past 5 minutes.

Collection method: The peak QPS of the domain name over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

qps_mean

Average QPS

This metric collects the average QPS of the domain name over the past 5 minutes.

Collection method: The average QPS of the domain name over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

waf_http_0

No WAF Status Code

This metric collects how many requests with no status code returned by WAF over the past 5 minutes.

Collection method: The number of requests with no WAF status code returned over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_2xx

Status Code Returned to the Client

(2XX)

This metric collects how many requests with status codes 2XX are returned by the origin server over the past 5 minutes.

Collection method: The number of requests with status codes 2XX returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_3xx

Status Code Returned by the Origin Server

(3XX)

This metric collects how many requests with status codes 3XX are returned by the origin server over the past 5 minutes.

Collection method: The number of requests with status codes 3XX returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_4xx

Status Code Returned by the Origin Server

(4XX)

This metric collects how many requests with status codes 4XX are returned by the origin server over the past 5 minutes.

Collection method: The number of requests with status codes 4XX returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_5xx

Status Code Returned by the Origin Server

(5XX)

This metric collects how many requests with status codes 5XX are returned by the origin server over the past 5 minutes.

Collection method: The number of requests with status codes 5XX returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_0

No Origin Server Status Code

This metric collects how many requests with no status code returned by the origin server over the past 5 minutes.

Collection method: The number of requests with no status code returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_400

Origin Server Status Code (400)

This metric measures the number of requests with status code 400 returned by the origin server for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 400 returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_401

Origin Server Status Code (401)

This metric measures the number of requests with status code 401 returned by the origin server for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 401 returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_403

Origin Server Status Code (403)

This metric measures the number of requests with status code 403 returned by the origin server for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 403 returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_404

Origin Server Status Code (404)

This metric measures the number of requests with status code 404 returned by the origin server for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 404 returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_405

Origin Server Status Code (405)

This metric measures the number of requests with status code 405 returned by the origin server for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 405 returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_406

Origin Server Status Code (406)

This metric measures the number of requests with status code 406 returned by the origin server for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 406 returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_500

Origin Server Status Code (500)

This metric measures the number of requests with status code 500 returned by the origin server for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 500 returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_502

Origin Server Status Code (502)

This metric measures the number of requests with status code 502 returned by the origin server for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 502 returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_503

Origin Server Status Code (503)

This metric measures the number of requests with status code 503 returned by the origin server for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 503 returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

upstream_code_504

Origin Server Status Code (504)

This metric measures the number of requests with status code 504 returned by the origin server for the monitored object over the past 5 minutes.

Collection method: The number of requests with status code 504 returned by the origin server over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

inbound_traffic_peak

Peak Inbound Bandwidth

This metric collects the peak inbound bandwidth to the domain name over the past 5 minutes.

Collection method: The peak inbound bandwidth to the domain name over the past 5 minutes is collected.

≥ 0

Value type: Float

Mbit/s

1000

waf_instance_id

Protected domain name

5 minutes

inbound_traffic_mean

Average Inbound Bandwidth

This metric collects the average inbound bandwidth to the domain name over the past 5 minutes.

Collection method: The average inbound bandwidth to the domain name over the past 5 minutes is collected.

≥ 0

Value type: Float

Mbit/s

1000

waf_instance_id

Protected domain name

5 minutes

outbound_traffic_peak

Peak Outbound Bandwidth

This metric measures the peak outbound bandwidth for the domain name over the past 5 minutes.

Collection method: The peak outbound bandwidth for the domain name over the past 5 minutes is collected.

≥ 0

Value type: Float

Mbit/s

1000

waf_instance_id

Protected domain name

5 minutes

outbound_traffic_mean

Average Outbound Bandwidth

This metric measures the average outbound bandwidth for the domain name over the past 5 minutes.

Collection method: The average outbound bandwidth for the domain name over the past 5 minutes is collected.

≥ 0

Value type: Float

Mbit/s

1000

waf_instance_id

Protected domain name

5

attacks

Number of Attack Requests

This metric measures the total number of attacks against the domain name over the past 5 minutes.

Collection method: The number of attacks against the domain name over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

crawlers

Crawler Requests

This metric measures the crawler attacks against the domain name over the past 5 minutes.

Collection method: The number of crawler attacks against the domain name over the past 5 minutes is collected.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

base_protection_counts

Basic Web Protection Actions

This metric measures the number of attacks defended by basic web protection rules over the last 5 minutes.

Collection method: The system collects the number of attacks that hit basic web protection rules over the last 5 minutes.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

precise_protection_counts

Precise Protection Actions

This metric measures the number of attacks defended by precise protection rules over the last 5 minutes.

Collection method: The system collects the number of attacks that hit precise protection rules over the last 5 minutes.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

cc_protection_counts

CC Attacks Blocked

This metric measures the number of attacks blocked by CC attack protection rules over the last 5 minutes.

Collection method: The system collects the number of attacks that hit CC attack protection rules over the last 5 minutes.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

white_black_ip_protection_counts

Blacklist and Whitelist IP Protection Count

This metric measures the number of attacks defended by IP address blacklist and whitelist rules over the last 5 minutes.

Collection method: The system collects the number of attacks that hit blacklist and whitelist rules over the last 5 minutes.

≥ 0

Value type: Float

Count

N/A

waf_instance_id

Protected domain name

5 minutes

Metrics for Dedicated WAF Instances

Table 2 Metrics for dedicated WAF instances

Metric ID

Metric Name

Description

Value Range

Unit

Number System

Dimension

Monitored Object

Monitoring Interval (Raw Data)

cpu_util

CPU Usage

This metric measures the CPU usage of the monitored object.

Collection method: 100% minus idle CPU usage percentage

0–100

Value type: Float

%

N/A

instance_id

Dedicated WAF instances

1

mem_util

Memory Usage

This metric measures the memory usage of the measured object.

Collection method: 100% minus idle memory percentage

0–100

Value type: Float

%

N/A

instance_id

Dedicated WAF instances

1

disk_util

Disk Usage

This metric measures the disk usage of the measured object.

Collection method: 100% minus idle disk space percentage

0–100

Value type: Float

%

N/A

instance_id

Dedicated WAF instances

1

disk_avail_size

Available Disk Space

This metric measures the available disk space of the measured object.

Collection mode: The size of free disk space is collected.

≥ 0

Value type: Float

Byte, KB, MB, GB, TB, and PB

1024

instance_id

Dedicated WAF instances

1

disk_read_bytes_rate

Disk Read Rate

This metric measures the number of bytes read from the disk per second for the monitored object.

Collection mode: The number of bytes read from the disk per second is collected.

≥ 0

Value type: Float

Byte/s, KB/s, MB/s, and GB/s

1024

instance_id

Dedicated WAF instances

1

disk_write_bytes_rate

Disk Write Rate

This metric measures the number of bytes written into the disk per second for the monitored object.

Collection mode: The number of bytes written into the disk per second is collected.

≥ 0

Value type: Float

Byte/s, KB/s, MB/s, and GB/s

1024

instance_id

Dedicated WAF instances

1

disk_read_requests_rate

Disk Read Requests

This metric measures the number of read requests received from the disk per second for the monitored object.

Collection mode: The number of read requests processed by the disk per second is collected.

≥ 0

Value type: Float

request/s

N/A

instance_id

Dedicated WAF instances

1

disk_write_requests_rate

Disk Write Requests

This metric measures the number of write requests sent to the disk per second for the monitored object.

Collection method: The number of write requests processed by the disk per second is collected.

≥ 0

Value type: Float

request/s

N/A

instance_id

Dedicated WAF instances

1

network_incoming_bytes_rate

Incoming Traffic

This metric measures the incoming traffic of the monitored object per second.

Collection method: The incoming traffic over the NIC per second is collected.

≥ 0

Value type: Float

Byte/s, KB/s, MB/s, and GB/s

1024

instance_id

Dedicated WAF instances

1

network_outgoing_bytes_rate

Outgoing Traffic

This metric measures the outgoing traffic of the monitored object per second.

Collection method: The outgoing traffic over the NIC per second is collected.

≥ 0

Value type: Float

Byte/s, KB/s, MB/s, and GB/s

1024

instance_id

Dedicated WAF instances

1

network_incoming_packets_rate

Incoming Packet Rate

This metric measures the number of incoming data packets per second for the monitored object.

Collection method: The number of incoming packets over the NIC per second is collected.

≥ 0

Value type: Int

Packet/s

N/A

instance_id

Dedicated WAF instances

1

network_outgoing_packets_rate

Outgoing Packet Rate

This metric measures the number of outgoing packets per second for the monitored object.

Collection method: The number of outgoing packets over the NIC per second is collected.

≥ 0

Value type: Int

Packet/s

N/A

instance_id

Dedicated WAF instances

1

concurrent_connections

Concurrent Connections

This metric measures the number of concurrent connections processed by the monitored object.

Collection method: The number of concurrent connections in the system is collected.

≥ 0

Value type: Int

Count

N/A

instance_id

Dedicated WAF instances

1

active_connections

Active Connections

This metric measures the number of active connections for the monitored object.

Collection method: The number of active connections in the system is collected.

≥ 0

Value type: Int

Count

N/A

instance_id

Dedicated WAF instances

1

latest_policy_sync_time

Latest Rule Synchronization

This metric measures the duration of the most recent WAF policy synchronization for the monitored object.

Collection method: The duration of the most recent WAF policy synchronization is collected.

≥ 0

Value type: Int

ms

N/A

instance_id

Dedicated WAF instances

1

instance_qps_mean

Peak QPS

This metric measures the peak QPS of domain names protected by a dedicated WAF instance.

Calculation method: The system collects peak QPS of all domain names protected by dedicated WAF instances within the last five minutes.

≥ 0

Value type: Float

Count

N/A

instance_id

Dedicated WAF instances

5 minutes

instance_qps_peak

Average QPS

This metric measures the average QPS of domain names protected by a dedicated WAF instance.

Calculation method: The system collects the average QPS of all domain names protected by dedicated WAF instances within the last five minutes.

≥ 0

Value type: Float

Count

N/A

instance_id

Dedicated WAF instances

5 minutes

instance_qps_usage

QPS Usage

This metric measures the QPS usage of domain names protected by a dedicated WAF instance.

Calculation method: The system collects the QPS usage of all domain names protected by dedicated WAF instances within the last five minutes.

≥ 0

Value type: Float

%

N/A

instance_id

Dedicated WAF instances

5 minutes

instance_inbound_traffic_peak

Peak Inbound Bandwidth

This metric measures the peak inbound bandwidth of domain names protected by a dedicated WAF instance.

Calculation method: The system collects the peak inbound bandwidth of all domain names protected by dedicated WAF instances within the last five minutes.

≥ 0

Value type: Float

Mbit/s

N/A

instance_id

Dedicated WAF instances

5 minutes

instance_inbound_traffic_mean

Average Inbound Bandwidth

This metric measures the average inbound bandwidth of domain names protected by WAF instances.

Calculation method: The system collects the average inbound bandwidth of all domain names protected by dedicated WAF instances within the last five minutes.

≥ 0

Value type: Float

Mbit/s

N/A

instance_id

Dedicated WAF instances

5 minutes

instance_inbound_traffic_usage

Inbound Bandwidth Usage

This metric measures the inbound bandwidth usage of domain names protected by a dedicated WAF instance.

Calculation method: The system collects the inbound bandwidth usage of all domain names protected by dedicated WAF instances within the last five minutes.

≥ 0

Value type: Float

%

N/A

instance_id

Dedicated WAF instances

5 minutes

instance_outbound_traffic_peak

Peak Outbound Bandwidth

This metric measures the peak outbound bandwidth of domain names protected by a dedicated WAF instance.

Calculation method: The system collects the peak outbound bandwidth of all domain names protected by dedicated WAF instances within the last five minutes.

≥ 0

Value type: Float

Mbit/s

N/A

instance_id

Dedicated WAF instances

5 minutes

instance_outbound_traffic_mean

Average Outbound Bandwidth

This metric measures the average outbound bandwidth of domain names protected by a dedicated WAF instance.

Calculation method: The system collects the average outbound bandwidth of all domain names protected by dedicated WAF instances within the last five minutes.

≥ 0

Value type: Float

Mbit/s

N/A

instance_id

Dedicated WAF instances

5 minutes

instance_outbound_traffic_usage

Outbound Bandwidth Usage

This metric measures the outbound bandwidth usage of domain names protected by a dedicated WAF instance.

Calculation method: The system collects the outbound bandwidth usage of all domain names protected by dedicated WAF instances within the last five minutes.

≥ 0

Value type: Float

%

N/A

instance_id

Dedicated WAF instances

5 minutes

Monitored Metrics for Protected Domain Names

Table 3 Monitored metrics for domain names protected with WAF

Metric ID

Metric Name

Description

Value Range

Unit

Number System

Dimension

Monitored Object

Monitoring Interval (Minute)

project_qps_mean

Peak QPS

This metric measure the peak QPS of domain names protected by cloud WAF in a project.

Calculation method: The system collects the peak QPS across all domain names protected by cloud WAF in a project within the last five minutes.

≥ 0

Value type: Float

Count

N/A

waf_project_id

Protection project

5 minutes

project_qps_peak

Average QPS

This metric measures the average QPS of domain names protected by cloud WAF in a project.

Calculation method: The system collects the average QPS across all domain names protected by cloud WAF in a project within the last five minutes.

≥ 0

Value type: Float

Count

N/A

waf_project_id

Protection project

5 minutes

project_qps_usage

QPS Usage

This metric measures the QPS usage of domain names protected by cloud WAF in the current project.

Calculation method: The system collects the QPS usage across all domain names protected by cloud WAF in a project within the last five minutes.

≥ 0

Value type: Float

%

N/A

waf_project_id

Protection project

5 minutes

project_inbound_traffic_peak

Peak Inbound Bandwidth

This metric measures the peak inbound bandwidth of domain names protected by cloud WAF in a project.

Calculation method: The system collects the peak inbound bandwidth across all domain names protected by cloud WAF in a project within the last five minutes.

≥ 0

Value type: Float

Mbit/s

N/A

waf_project_id

Protection project

5 minutes

project_inbound_traffic_mean

Average Inbound Bandwidth

This metric measures the average inbound bandwidth of domain names protected by cloud WAF in a project.

Calculation method: The system collects the average inbound bandwidth across all domain names protected by cloud WAF in a project within the last five minutes.

≥ 0

Value type: Float

Mbit/s

N/A

waf_project_id

Protection project

5 minutes

project_inbound_traffic_usage

Inbound Bandwidth Usage

This metric measures the inbound bandwidth usage of domain names protected by cloud WAF in a project.

Calculation method: The system collects the inbound bandwidth usage across all domain names protected by cloud WAF in a project within the last five minutes.

≥ 0

Value type: Float

%

N/A

waf_project_id

Protection project

5 minutes

project_outbound_traffic_peak

Peak Outbound Bandwidth

This metric measures the peak outbound bandwidth of domain names protected by cloud WAF in a project.

Calculation method: The system collects the peak outbound bandwidth across all domain names protected by cloud WAF in a project within the last five minutes.

≥ 0

Value type: Float

Mbit/s

N/A

waf_project_id

Protection project

5 minutes

project_outbound_traffic_mean

Average Outbound Bandwidth

This metric measures the average outbound bandwidth of domain names protected by cloud WAF in a project.

Calculation method: The system collects the average outbound bandwidth across all domain names protected by cloud WAF in a project within the last five minutes.

≥ 0

Value type: Float

Mbit/s

N/A

waf_project_id

Protection project

5 minutes

project_outbound_traffic_usage

Outbound Bandwidth Usage

This metric measures the outbound bandwidth usage of domain names protected by cloud WAF in a project.

Calculation method: The system collects the outbound bandwidth usage across all domain names protected by cloud WAF in a project within the last five minutes.

≥ 0

Value type: Float

%

N/A

waf_project_id

Protection project

5 minutes

Dimensions

Key

Value

waf_instance_id

ID of the website protected with WAF. You can obtain the value by referring to Querying Protected Domain Names in Cloud Mode.

instance_id

ID of the dedicated WAF instance. You can obtain the value by referring to Viewing Information About a Dedicated WAF Instance.

waf_project_id

WAF protection project ID. You can obtain the value by referring to Obtaining a Project ID.

Example of Raw Data Format of Monitored Metrics

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
 
[
    {
        "metric": {
             // Namespace
            "namespace": "SYS.WAF",
            "dimensions": [
                {
                    // Dimension name, for example, protected website
                    "name": "waf_instance_id",
                    // ID of the monitored object in this dimension, for example, ID of the protected website
                    "value": "082db2f542e0438aa520035b3e99cd99"
                }
            ],
           //Metric ID
            "metric_name": "waf_http_2xx"
        },
// Time to live, which is predefined for the metric
        "ttl": 172800,
         // Metric value
        "value": 0.0,
       // Metric unit
        "unit": "Count",
         // Metric value type
        "type": "float",
        // Collection time for the metric
        "collect_time": 1637677359778
    }
]
Parent Topic: Using Cloud Eye to Monitor WAF