How do I create an OpenSearch subscription for CloudWatch using the API?

Question

It's possible to stream CloudWatch logs to OpenSearch. The process of setting up the subscription via the UI ids described here: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_OpenSearch_Stream.html. Is there a way of setting this up using the API or CloudFormation? It's not listed as an option here: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutSubscriptionFilter.html

Answer

I recommend taking a look at sample CloudFormation templates such as [this one](https://github.com/awslabs/hids-cloudwatchlogs-elasticsearch-template/blob/master/cloudformation/hids-cwl-es.template) and [another one here](https://docs.aws.amazon.com/solutions/latest/centralized-logging/templates.html). When you create a subscription to stream logs to OpenSearch, a Lambda function is used to stream logs. Therefore, there is no single API to set up the subscription. Instead, you will need to create a subscription with a destination set for Lambda.

How do I create an OpenSearch subscription for CloudWatch using the API?

Relevant content