CloudWatch log centralization - cross region and cross account

0

Hey!

I'm looking for a solution to centralize the log of several accounts into one, but I want to centralize from different regions as well. I saw that CloudWatch has this feature, but it doesn't allow sharing logs between different regions. I saw that AWS itself suggests an ELK solution https://aws.amazon.com/pt/what-is/elk-stack/ (ElasticSearch/OpenSearch, Logstash and Kibana), but they say: "Centralized Logging with OpenSearch supports ingesting AWS service logs and application logs from a different AWS account in the same region.

...Currently, Centralized Logging with OpenSearch does not automate the log ingestion from a different AWS Region. You need to ingest logs from other regions into pipelines provisioned by Centralized Logging with OpenSearch."

https://docs.aws.amazon.com/solutions/latest/centralized-logging-with-opensearch/frequently-asked-questions.html

I've seen some other alternatives with Kinesis, but the cost concerns me. What's another solution?

1 個回答
1

CloudWatch has cross account capabilities. Further resources:

If you want an even more comprehensive solution (with VPC flow logs, CloudTrail etc), there is Centralized logging and multiple-account security guardrails.

profile pictureAWS
已回答 2 個月前
profile picture
專家
已審閱 1 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南