# Functionbeat unable to export cloudwatch logs to elastic

**URL:** <https://discuss.elastic.co/t/functionbeat-unable-to-export-cloudwatch-logs-to-elastic/305927>\
**Category:** Beats\
**Tags:** functionbeat\
**Created:** [May 30, 2022, 9:34am UTC](https://discuss.elastic.co/t/functionbeat-unable-to-export-cloudwatch-logs-to-elastic/305927 "2022-05-30T09:34:08Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![rishabhtryroll](https://avatars.discourse-cdn.com/v4/letter/r/f04885/32.png) [@rishabhtryroll](https://discuss.elastic.co/u/rishabhtryroll)\
**Post date:** [May 30, 2022, 9:34am UTC](https://discuss.elastic.co/t/functionbeat-unable-to-export-cloudwatch-logs-to-elastic/305927/1 "2022-05-30T09:34:08Z")

</div>

I am using function beat to export cloud watch logs to elastic but got no data in the indices.

Followed that doc [https://www.elastic.co/guide/en/beats/functionbeat/current/functionbeat-installation-configuration.html](https://www.elastic.co/guide/en/beats/functionbeat/current/functionbeat-installation-configuration.html)

The lambda function was created successfully, I didn't find any errors in the logs

Data streams were also created with the name function beat but the docs count is 0

What should I do now?

---

<div class="post-metadata">

**Author:** ![mtojek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mtojek/32/63863_2.png) [@mtojek](https://discuss.elastic.co/u/mtojek)\
**Post date:** [May 30, 2022, 2:52pm UTC](https://discuss.elastic.co/t/functionbeat-unable-to-export-cloudwatch-logs-to-elastic/305927/2 "2022-05-30T14:52:29Z")

</div>

Hi,

can you post any debug logs and configuration, so that we can see what's going on under the hood?

---

<div class="post-metadata">

**Author:** ![rishabhtryroll](https://avatars.discourse-cdn.com/v4/letter/r/f04885/32.png) [@rishabhtryroll](https://discuss.elastic.co/u/rishabhtryroll)\
**Post date:** [May 31, 2022, 7:16am UTC](https://discuss.elastic.co/t/functionbeat-unable-to-export-cloudwatch-logs-to-elastic/305927/3 "2022-05-31T07:16:51Z")

</div>

> [@mtojek](#):
>
> can you post any debug logs and configuration, so that we can see what's going on under the hood?

{"log.level":"info","@timestamp":"2022-05-31T12:35:11.015+0530","log.logger":"aws","log.origin":{"file.name":"aws/op\_cloudformation.go","file.line":97},"message":"Stack event received, ResourceType: AWS::Logs::SubscriptionFilter, LogicalResourceId: fnbcloudwatchrdsSFawsrdsinstancerollwebsandboxdbencryptedpostgresql, ResourceStatus: CREATE\_COMPLETE","service.name":"functionbeat","ecs.version":"1.6.0"}  
{"log.level":"info","@timestamp":"2022-05-31T12:35:21.271+0530","log.logger":"aws","log.origin":{"file.name":"aws/op\_cloudformation.go","file.line":97},"message":"Stack event received, ResourceType: AWS::Lambda::Permission, LogicalResourceId: fnbcloudwatchrdsPermission0, ResourceStatus: CREATE\_COMPLETE","service.name":"functionbeat","ecs.version":"1.6.0"}  
{"log.level":"info","@timestamp":"2022-05-31T12:35:21.271+0530","log.logger":"aws","log.origin":{"file.name":"aws/op\_cloudformation.go","file.line":97},"message":"Stack event received, ResourceType: AWS::CloudFormation::Stack, LogicalResourceId: fnb-cloudwatch-rds-stack, ResourceStatus: CREATE\_COMPLETE","service.name":"functionbeat","ecs.version":"1.6.0"}  
{"log.level":"debug","@timestamp":"2022-05-31T12:35:21.271+0530","log.logger":"aws","log.origin":{"file.name":"aws/op\_delete\_file\_bucket.go","file.line":38},"message":"Removing file 'functionbeat-deployment/cloudwatch-rds/lkqKbqPn4H5x95hndsU1p5WkuLptGS5VestTA2i9gPE/functionbeat.zip' on bucket 'rds-logs-sandbox'","service.name":"functionbeat","ecs.version":"1.6.0"}  
{"log.level":"debug","@timestamp":"2022-05-31T12:35:22.599+0530","log.logger":"aws","log.origin":{"file.name":"aws/op\_delete\_file\_bucket.go","file.line":51},"message":"Remove successful","service.name":"functionbeat","ecs.version":"1.6.0"}  
{"log.level":"debug","@timestamp":"2022-05-31T12:35:22.599+0530","log.logger":"aws.executor","log.origin":{"file.name":"executor/executor.go","file.line":68},"message":"All operations successful","service.name":"functionbeat","ecs.version":"1.6.0"}  
{"log.level":"debug","@timestamp":"2022-05-31T12:35:22.599+0530","log.logger":"aws","log.origin":{"file.name":"aws/cli\_manager.go","file.line":132},"message":"Successfully created function 'cloudwatch-rds'","service.name":"functionbeat","ecs.version":"1.6.0"}  
{"log.level":"debug","@timestamp":"2022-05-31T12:35:22.599+0530","log.logger":"aws","log.origin":{"file.name":"aws/cli\_manager.go","file.line":133},"message":"Deploy finish for function 'cloudwatch-rds'","service.name":"functionbeat","ecs.version":"1.6.0"}  
Function: cloudwatch-rds, deploy successful  
{"log.level":"debug","@timestamp":"2022-05-31T12:35:22.599+0530","log.logger":"cli-handler","log.origin":{"file.name":"cmd/cli\_handler.go","file.line":64},"message":"Deploy execution ended","service.name":"functionbeat","ecs.version":"1.6.0"}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 28, 2022, 9:17am UTC](https://discuss.elastic.co/t/functionbeat-unable-to-export-cloudwatch-logs-to-elastic/305927/4 "2022-06-28T09:17:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.