Hello team. I installed and configured filebeat to collect logs in aws. I use the aws module to collect logs cloudtrail. The data began to be collected, but I noticed that the data was not included in the log - "eventName": "CreateVolume" All messages before and after it are available, but this …

Filebeat loses or doesn't deliver messages from AWS CloudTrail

San9 (Alex) April 15, 2024, 8:17am 4

As it turned out, the problem was elasticsearch. problem when matching dynamic field type.

Topic		Replies	Views
Missing events when shipping Cloudtrail logs with Filebeat and the AWS module Beats beats-module , filebeat	9	1167	August 12, 2020
Filebeat and AWS Module unable to get CloudTrail logs Beats beats-module , filebeat	2	1488	June 25, 2020
Filebeat AWS Module Errors and Missing Logs Beats beats-module , filebeat	1	776	September 8, 2020
Filebeat 7.10 aws cloudtrail is not parsing the output as shown in documentation Beats beats-module , filebeat	2	355	March 24, 2022
Filebeat:aws:cloudtrail Beats filebeat	1	437	February 12, 2021