4-Layer Detection Pipeline

4-Layer Detection Pipeline An architecture diagram generated by Archify. Data Sources · Metrics · Logs · Traces · Events · Architecture component · 01 · Sources Data Sources Metrics · Logs · Traces · Events 01 · Sources Collection · CloudWatch Agent · Fluent Bit · ADOT Collector · Prometheus · Architecture component · 02 · Collection Collection CloudWatch Agent · Fluent Bit · ADOT Collector · Prometheus 02 · Collection Analysis · CloudWatch Logs Insights · Metric Alarms · Anomaly Detection · Composite Alarms · Architecture component · 03 · Analysis Analysis CloudWatch Logs Insights · Metric Alarms · Anomaly Detection · Composite Alarms 03 · Analysis Alerting · SNS · Slack · PagerDuty · EventBridge · Architecture component · 04 · Alerting Alerting SNS · Slack · PagerDuty · EventBridge 04 · Alerting collect telemetry store · query · evaluate alarms notify on anomaly Legend Collection layer Analysis layer Alerting channels Data Sources

Reference Architecture 1: AWS Native

  • • Fluent Bit ships container logs to CloudWatch Logs (/aws/eks/my-cluster/containers)
  • • ADOT Collector exports traces to X-Ray and metrics to CloudWatch EMF and Prometheus remote write

Reference Architecture 2: Open Source Stack

  • • Prometheus + Alertmanager + Grafana
  • • Alertmanager routing: severity=critical → PagerDuty, severity=warning → Slack