---
title: AWS WAF monitoring integration
source: https://docs.newrelic.com/docs/infrastructure/amazon-integrations/aws-integrations-list/aws-waf-monitoring-integration
---

> #### ⚠️ IMPORTANT
>
> Enable the [AWS CloudWatch Metric Streams integration](https://docs.newrelic.com/docs/infrastructure/amazon-integrations/aws-integrations-list/aws-metric-stream/) to monitor all CloudWatch metrics from your AWS services, including custom namespaces. Individual integrations are no longer our recommended option.

New Relic offers an integration for reporting your [AWS Web Application Firewall](https://aws.amazon.com/waf/) data. This document explains how to activate this integration and describes the data that can be reported.

## Activate integration [#activate]

To enable this integration follow standard procedures to [connect AWS services to New Relic](https://docs.newrelic.com/docs/infrastructure/infrastructure-integrations/getting-started/connect-aws-integrations-infrastructure).

## Configuration and polling [#polling]

You can change the polling frequency and filter data using [configuration options](https://docs.newrelic.com/docs/integrations/new-relic-integrations/getting-started/configure-polling-frequency-data-collection-cloud-integrations).

Default [polling](https://docs.newrelic.com/docs/infrastructure/amazon-integrations/aws-integrations-list/aws-polling-intervals-infrastructure-integrations) information for the AWS WAF integration:

-   New Relic polling interval: 5 minutes
-   Amazon CloudWatch data interval: 1 minute

## Find and use data [#find-data]

To find your integration data, go to **[one.newrelic.com > All capabilities](https://one.newrelic.com/all-capabilities) > Infrastructure > AWS** and select an integration.

You can [query and explore your data](https://docs.newrelic.com/docs/using-new-relic/data/understand-data/query-new-relic-data) using the following [event type](https://docs.newrelic.com/docs/data-apis/understand-data/new-relic-data-types/#event-data):

### WAF Classic

| Entity    | Event Type              | Provider          |
| --------- | ----------------------- | ----------------- |
| WebACL    | `AwsWafWebACLSample`    | `AwsWafWebACL`    |
| RuleGroup | `AwsWafRuleGroupSample` | `AwsWafRuleGroup` |

### WAF V2

| Entity    | Event Type                | Provider            |
| --------- | ------------------------- | ------------------- |
| WebACL    | `AwsWafV2WebACLSample`    | `AwsWafV2WebACL`    |
| RuleGroup | `AwsWafV2RuleGroupSample` | `AwsWafV2RuleGroup` |

For more on how to use your data, see [Understand and use integration data](https://docs.newrelic.com/docs/infrastructure/integrations/find-use-infrastructure-integration-data).

## Metric data [#metrics]

This integration collects AWS WAF data for WebACL and RuleGroup.

### WAF WebACL data

| Metric            | Unit  | Description                                                                                                                             |
| ----------------- | ----- | --------------------------------------------------------------------------------------------------------------------------------------- |
| `AllowedRequests` | Count | The number of allowed web requests.                                                                                                     |
| `BlockedRequests` | Count | The number of blocked web requests.                                                                                                     |
| `CountedRequests` | Count | A counted web request is one that matches all the conditions in a particular rule. Counted web requests are typically used for testing. |
| `PassedRequests`  | Count | Passed requests are requests that don't match any rule contained in the rule group.                                                     |

### WAF RuleGroup data

| Metric            | Unit  | Description                                                                                                                             |
| ----------------- | ----- | --------------------------------------------------------------------------------------------------------------------------------------- |
| `AllowedRequests` | Count | The number of allowed web requests.                                                                                                     |
| `BlockedRequests` | Count | The number of blocked web requests.                                                                                                     |
| `CountedRequests` | Count | A counted web request is one that matches all the conditions in a particular rule. Counted web requests are typically used for testing. |
| `PassedRequests`  | Count | Passed requests are requests that don't match any rule contained in the rule group.                                                     |