A sys admin has enabled logging on ELB. Which of the below mentioned fields will not be a part of the log file
name?
A.
Load Balancer IP
B.
EC2 instance IP
C.
S3 bucket name
D.
Random string
Explanation:
Elastic Load Balancing access logs capture detailed information for all the requests made to the load balancer.
Elastic Load Balancing publishes a log file from each load balancer node at the interval that the user has
specified. The load balancer can deliver multiple logs for the same period. Elastic Load Balancing creates log
file names in the following format:
“{Bucket}/{Prefix}/AWSLogs/{AWS AccountID}/elasticloadbalancing/{Region}/{Year}/{Month}/{Day}/{AWS
Account ID}_elasticloadbalancing_{Region}_{Load Balancer Name}_{End Time}_{Load Balancer IP}_{Random
String}.log“
The answer is B.
http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/access-log-collection.html#access-log-file-format
The file names of the access logs use the following format:
bucket[/prefix]/AWSLogs/aws-account-id/elasticloadbalancing/region/yyyy/mm/dd/aws-account-id_elasticloadbalancing_region_load-balancer-name_end-time_ip-address_random-string.log
ip-address
The IP address of the load balancer node that handled the request. For an internal load balancer, this is a private IP address.
Why is the S3 bucket name not the right answer? After all, it has nothing to do with ELB and wont be present in the log file name too.
You’ll find the bucket name in the log file.
http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/access-log-collection.html
b
B
Answer is B.
http://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html