By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Segregate logs in Opensearch based on accounts

0

Hello, I have implemented a central logging solution with Opensearch. There are multiple AWS accounts for different projects. All logs are sent to Single S3 and then to opensearch. How can I segregate logs (cloudtrail, vpc flow logs, ec3 logs, web server logs) based on accounts, since one project doesnt want to see another project logs.

Topics
Management & GovernanceDeveloper Tools
Tags
Amazon CloudWatchMonitoring & LoggingAWS CloudTrail
Language
English
AWS-MM
asked 2 years ago324 views
1 Answer
0

If you follow this process, it will work well and will save you time. We also did the same as you, but kept running into obstacles. So enjoy the process.

https://github.com/aws-samples/siem-on-amazon-opensearch-service

DwayneWhite
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content