Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

Segregate logs in Opensearch based on accounts

0

Hello, I have implemented a central logging solution with Opensearch. There are multiple AWS accounts for different projects. All logs are sent to Single S3 and then to opensearch. How can I segregate logs (cloudtrail, vpc flow logs, ec3 logs, web server logs) based on accounts, since one project doesnt want to see another project logs.

Topics
Management & GovernanceDeveloper Tools
Tags
Amazon CloudWatchAWS CloudTrailMonitoring & Logging
Language
English

asked 5 years ago617 views

1 Answer
0

If you follow this process, it will work well and will save you time. We also did the same as you, but kept running into obstacles. So enjoy the process.

https://github.com/aws-samples/siem-on-amazon-opensearch-service

answered 4 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content