Control: Compute instances should have monitoring enabled

Usage

Run the control in your terminal:

steampipe check oci_thrifty.control.compute_instance_monitoring_enabled

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share oci_thrifty.control.compute_instance_monitoring_enabled

oci_core_instance

oci_identity_compartment

SQL

with instance_monitoring as (
  select
    distinct display_name,
    config
  from
    oci_core_instance,
    jsonb_array_elements(agent_config -> 'pluginsConfig') as config
  where
    config ->> 'name' = 'Compute Instance Monitoring'
    and config ->> 'desiredState' = 'ENABLED'
)
select
  v.id as resource,
  case
    when l.display_name is null then 'alarm'
    else 'ok'
  end as status,
  case
    when l.display_name is null then v.title || ' logging disabled.'
    else v.title || ' logging enabled.'
  end as reason,
  coalesce(c.name, 'root') as compartment,
  v.region
from
  oci_core_instance as v
  left join instance_monitoring as l on v.display_name = l.display_name
  left join oci_identity_compartment as c on c.id = v.compartment_id
where
  v.lifecycle_state <> 'TERMINATED';

Tags