CloudWatch log centralization - cross region and cross account

0

Hey!

I'm looking for a solution to centralize the log of several accounts into one, but I want to centralize from different regions as well. I saw that CloudWatch has this feature, but it doesn't allow sharing logs between different regions. I saw that AWS itself suggests an ELK solution https://aws.amazon.com/pt/what-is/elk-stack/ (ElasticSearch/OpenSearch, Logstash and Kibana), but they say: "Centralized Logging with OpenSearch supports ingesting AWS service logs and application logs from a different AWS account in the same region.

...Currently, Centralized Logging with OpenSearch does not automate the log ingestion from a different AWS Region. You need to ingest logs from other regions into pipelines provisioned by Centralized Logging with OpenSearch."

https://docs.aws.amazon.com/solutions/latest/centralized-logging-with-opensearch/frequently-asked-questions.html

I've seen some other alternatives with Kinesis, but the cost concerns me. What's another solution?

1 Respuesta
1

CloudWatch has cross account capabilities. Further resources:

If you want an even more comprehensive solution (with VPC flow logs, CloudTrail etc), there is Centralized logging and multiple-account security guardrails.

profile pictureAWS
respondido hace 2 meses
profile picture
EXPERTO
revisado hace un mes

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas