# Filebeat AWS module not fetching multi region logs

**URL:** https://discuss.elastic.co/t/filebeat-aws-module-not-fetching-multi-region-logs/286711
**Category:** Beats
**Tags:** filebeat
**Created:** [October 14, 2021, 10:53am UTC](https://discuss.elastic.co/t/filebeat-aws-module-not-fetching-multi-region-logs/286711 "2021-10-14T10:53:33Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![ankitdevnalkar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ankitdevnalkar/32/46158_2.png) [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)
#### Post date: [October 14, 2021, 10:53am UTC](https://discuss.elastic.co/t/filebeat-aws-module-not-fetching-multi-region-logs/286711/1 "2021-10-14T10:53:33Z")

</div>

I have configured multiple accounts of AWS with Filebeat AWS module(With help of [this thread](https://discuss.elastic.co/t/ingesting-cloudtrail-logs-from-multiple-aws-accounts/246999)) to fetch Cloudtrail logs.

However, I wonder I am getting only specific region logs. For example, I have configured an S3 notification to SQS [https://sqs.ap-south-1.amazonaws.com/](https://sqs.ap-south-1.amazonaws.com/)/aws-signals and it only sends me logs of ap-south-1 only.

Note : I have created a multi-region trail

 ![Selection_294](https://us1.discourse-cdn.com/elastic/original/3X/4/2/426fb8ad65f5c4e34a178794ebc96c7d42b8910b.png)

@Kaiyan_Sheng could you help with this?

---

<div class="post-metadata">

### Author: ![Kaiyan\_Sheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kaiyan_sheng/32/38247_2.png) [@Kaiyan\_Sheng](https://discuss.elastic.co/u/Kaiyan_Sheng)
#### Post date: [October 14, 2021, 6:35pm UTC](https://discuss.elastic.co/t/filebeat-aws-module-not-fetching-multi-region-logs/286711/2 "2021-10-14T18:35:36Z")

</div>

Hello! Could you post your configuration here and also do you see any error in Filebeat log? TIA!!

---

<div class="post-metadata">

### Author: ![ankitdevnalkar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ankitdevnalkar/32/46158_2.png) [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)
#### Post date: [October 21, 2021, 12:14pm UTC](https://discuss.elastic.co/t/filebeat-aws-module-not-fetching-multi-region-logs/286711/3 "2021-10-21T12:14:41Z")

</div>

Hi @Kaiyan_Sheng thanks for responding. The issue is resolved. it was a silly mistake of mine. I was looking at the field `cloud.region` however log region is being indicating in `awsRegion` field. 😄

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 18, 2021, 2:15pm UTC](https://discuss.elastic.co/t/filebeat-aws-module-not-fetching-multi-region-logs/286711/4 "2021-11-18T14:15:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.