I have a lambda function which sends cloudtrail logs to elasticsearch whenever new data arrives in a bucket. This works fine, however I would like to add one extra field that is not found in standard cloudtrail logs. This is what I have atm: def handler(event, context): logger.info('Event: ' + json…

Add a field to json body when indexing

davidbien May 10, 2019, 9:10am 8

Hi David,

Yes, we considered those options but finally decided to go for AWS managed service.

Cloudwatch Logs to Elasticsearch using AWS Lambda

Topic		Replies	Views
CloudTrail data to ElasticSearch Elasticsearch	2	860	December 21, 2017
Same field different types (primitive vs. complex) Elasticsearch	3	381	March 6, 2020
JSON parsing creates a field for each user Kibana	6	703	September 4, 2018
CloudFront Logs into ES - Index Mapping Query with Updating to 7.1? Elasticsearch	1	1392	July 24, 2019
How can I add Json-Data to historic index Elasticsearch	5	242	February 2, 2023