# Logstash-input-s3 assistance

**URL:** <https://discuss.elastic.co/t/logstash-input-s3-assistance/53670>\
**Category:** Logstash\
**Created:** [June 22, 2016, 2:20pm UTC](https://discuss.elastic.co/t/logstash-input-s3-assistance/53670 "2016-06-22T14:20:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Akumar](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@Akumar](https://discuss.elastic.co/u/Akumar)\
**Post date:** [June 22, 2016, 2:20pm UTC](https://discuss.elastic.co/t/logstash-input-s3-assistance/53670/1 "2016-06-22T14:20:15Z")

</div>

I am trying to read in cloudtrail logs from an S3 bucket and need assistance with the configuration and am hamstrung by limited example documentation.

The bucket data is in:  
All buckets/auditLogs//Cloudtrail////

s3 {  
type =\> "mgmt-audit"  
bucket =\> "Cloudtrail"  
# prefix =\> auditLogs//"  
aws\_credentials\_file =\> "/etc/logstash/creds.conf"  
codec =\> cloudtrail {}  
}

Thanks

Ash

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:51am UTC](https://discuss.elastic.co/t/logstash-input-s3-assistance/53670/2 "2017-07-06T04:51:08Z")

</div>