Skip to contents

Returns Insights metrics data for trails that have enabled Insights

Source: R/cloudtrail_operations.R
cloudtrail_list_insights_metric_data.Rd

Returns Insights metrics data for trails that have enabled Insights. The request must include the EventSource, EventName, and InsightType parameters.

See https://www.paws-r-sdk.com/docs/cloudtrail_list_insights_metric_data/ for full documentation.

Usage

cloudtrail_list_insights_metric_data(
  TrailName = NULL,
  EventSource,
  EventName,
  InsightType,
  ErrorCode = NULL,
  StartTime = NULL,
  EndTime = NULL,
  Period = NULL,
  DataType = NULL,
  MaxResults = NULL,
  NextToken = NULL
)

Arguments

TrailName

The Amazon Resource Name(ARN) or name of the trail for which you want to retrieve Insights metrics data. This parameter should only be provided to fetch Insights metrics data generated on trails logging data events. This parameter is not required for Insights metric data generated on trails logging management events.

EventSource

[required] The Amazon Web Services service to which the request was made, such as iam.amazonaws.com or s3.amazonaws.com.

EventName

[required] The name of the event, typically the Amazon Web Services API on which unusual levels of activity were recorded.

InsightType

[required] The type of CloudTrail Insights event, which is either ApiCallRateInsight or ApiErrorRateInsight. The ApiCallRateInsight Insights type analyzes write-only management API calls that are aggregated per minute against a baseline API call volume. The ApiErrorRateInsight Insights type analyzes management API calls that result in error codes.

ErrorCode

Conditionally required if the InsightType parameter is set to ApiErrorRateInsight.

If returning metrics for the ApiErrorRateInsight Insights type, this is the error to retrieve data for. For example, AccessDenied.

StartTime

Specifies, in UTC, the start time for time-series data. The value specified is inclusive; results include data points with the specified time stamp.

The default is 90 days before the time of request.

EndTime

Specifies, in UTC, the end time for time-series data. The value specified is exclusive; results include data points up to the specified time stamp.

The default is the time of request.

Period

Granularity of data to retrieve, in seconds. Valid values are 60, 300, and 3600. If you specify any other value, you will get an error. The default is 3600 seconds.

DataType

Type of data points to return. Valid values are NonZeroData and FillWithZeros. The default is NonZeroData.

MaxResults

The maximum number of data points to return. Valid values are integers from 1 to 21600. The default value is 21600.

NextToken

Returned if all datapoints can't be returned in a single call. For example, due to reaching MaxResults.

Add this parameter to the request to continue retrieving results starting from the last evaluated point.