CW Log Shipping to Self Hosted Elasticsearch on EKS

0

Hi.

We want to ship events matching an EventBridge rule in cloudwatch logs to our own self-hosted Elasticsearch. Using a Lambda to ship the logs would be a secondary option.

Is there any native way to ship these events?

Regards, Smruti

1 Answer
0

EventBridge is used for events that indicate a change in your resources, for example - Describe*, Put*, Get* actions etc. And, for your use case 'Subscription filter' is an appropriate solution which is native to CloudWatch Logs. Using Subscription filter, which monitors for a particular pattern you mention - for any newly ingested events, you can set a destination (like a target in EventBridge) where these filtered out events are sent.

Please keep in mind that these filters don't work retroactively, and are meant for only the log events ingested once after the filter is created.

Read about subscription filters.

profile pictureAWS
SUPPORT ENGINEER
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions