# Filebeat S3 input support for AWS WAF logs (support application/octet-stream)
**URL:** https://discuss.elastic.co/t/filebeat-s3-input-support-for-aws-waf-logs-support-application-octet-stream/258981
**Category:** Beats
**Tags:** filebeat
**Created:** [December 17, 2020, 11:40am UTC](https://discuss.elastic.co/t/filebeat-s3-input-support-for-aws-waf-logs-support-application-octet-stream/258981 "2020-12-17T11:40:35Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@rubal033](https://discuss.elastic.co/u/rubal033)
#### Post date: [December 17, 2020, 11:40am UTC](https://discuss.elastic.co/t/filebeat-s3-input-support-for-aws-waf-logs-support-application-octet-stream/258981/1 "2020-12-17T11:40:35Z")
As of now, there is Filebeat s3 input that doesn't support AWS WAF logs. AWS WAF logs use Kinesis Firehose to get to S3 and the "Content-type" is set to "application/octet-stream". Due to this, the logs didn't get expanded in the Elasticsearch.
If that support can be added it will resolve a big problem and many users looking forward to getting AWS WAF logs to the ELK stack for the analysis.
Thanks in Advance
---
### Author:  [@Kaiyan\_Sheng](https://discuss.elastic.co/u/Kaiyan_Sheng)
#### Post date: [December 18, 2020, 1:54am UTC](https://discuss.elastic.co/t/filebeat-s3-input-support-for-aws-waf-logs-support-application-octet-stream/258981/2 "2020-12-18T01:54:03Z")
Hi! Thank you for letting us know! Do you mind opening a github issue for this please? [https://github.com/elastic/beats/issues/new?template=feature-request.md](https://github.com/elastic/beats/issues/new?template=feature-request.md) TIA!!
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 15, 2021, 3:54am UTC](https://discuss.elastic.co/t/filebeat-s3-input-support-for-aws-waf-logs-support-application-octet-stream/258981/3 "2021-01-15T03:54:07Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.