I have configured multiple accounts of AWS with Filebeat AWS module(With help of this thread) to fetch Cloudtrail logs.
However, I wonder I am getting only specific region logs. For example, I have configured an S3 notification to SQS https://sqs.ap-south-1.amazonaws.com//aws-signals and it only sends me logs of ap-south-1 only.
Hi @Kaiyan_Sheng thanks for responding. The issue is resolved. it was a silly mistake of mine. I was looking at the field cloud.region however log region is being indicating in awsRegion field.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.