How to deliver DNS log from Route 53 to on-premises ELK

0

Hi guys! I receive a requirement that needs to deliver public DNS query log from Route 53 to their existing ELK (Elasticsearch, Logstash, Kibana) located in on-premises. Although I recommended that they use CloudWatch Log, OpenSearch in AWS but they insist on leveraging their existing ELK, so I have to find solution to meet this requirement. If you know the answer, please help me. Thanks!

1回答
0
承認された回答

You could configure your Route53 logs to be sent to a Kinesis Data Firehose delivery stream, with the destination of the stream set to your ELK setup. Since you have an on-prem ELK, you would have to use an HTTP endpoint to receive this data - https://docs.aws.amazon.com/firehose/latest/dev/create-destination.html#create-destination-http

Chamal
回答済み 1年前
  • thank you so much

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ