# Sending AWS Cloud Watch Logs to Elasticsearch

**URL:** <https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459>\
**Category:** Elasticsearch\
**Created:** [November 5, 2023, 12:06pm UTC](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459 "2023-11-05T12:06:53Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![laale1](https://avatars.discourse-cdn.com/v4/letter/l/90ced4/32.png) [@laale1](https://discuss.elastic.co/u/laale1)\
**Post date:** [November 5, 2023, 12:06pm UTC](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459/1 "2023-11-05T12:06:53Z")

</div>

Hello community.  
I want to send AWS Cloud Watch logs to my local Elasticsearch cluster?

I have seen AWS integrations but my question is how I'm going to connect those integrations on my AWS Cloud Watch?

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [November 6, 2023, 12:35pm UTC](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459/2 "2023-11-06T12:35:25Z")

</div>

> [@laale1](#):
>
> I have seen AWS integrations but my question is how I'm going to connect those integrations on my AWS Cloud Watch?

Hello, have you installed and configured the Integration? Have you checked the documentation? Do you have any issue installing and configuring?

When you install this integration on an agent it will ask you for the credentials and the Loggroup you want to collect.

Try installing first and if you have any issue open a new topic.

---

<div class="post-metadata">

**Author:** ![laale1](https://avatars.discourse-cdn.com/v4/letter/l/90ced4/32.png) [@laale1](https://discuss.elastic.co/u/laale1)\
**Post date:** [November 6, 2023, 1:25pm UTC](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459/3 "2023-11-06T13:25:58Z")

</div>

Hey @leandrojmp thanks again for the replay,  
I didn't install the integration yet, because I don't know where to install the agent am I going to install the agent in the AWS instance where the Cloud Watch Logs are? or I'm Going to install the agent in my local server then I will install the integration?.

I don't know where we want to install the agentthat why I asked the question?

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [November 6, 2023, 2:01pm UTC](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459/4 "2023-11-06T14:01:20Z")

</div>

> [@laale1](#):
>
> I don't know where we want to install the agentthat why I asked the question?

It is entirely your choice, you just need to have an Elastic Agent with a policy where you will install the AWS Integration.

The AWS CloudWatch will query the AWS CloudWatch service, so the Agent just need to have internet access.

---

<div class="post-metadata">

**Author:** ![laale1](https://avatars.discourse-cdn.com/v4/letter/l/90ced4/32.png) [@laale1](https://discuss.elastic.co/u/laale1)\
**Post date:** [November 7, 2023, 8:27am UTC](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459/5 "2023-11-07T08:27:03Z")

</div>

@leandrojmp I would like to install my agent on a local machine, then I will install the AWS integration of that agent.

so here are some screen shots I took my integration

 ![aws1](https://us1.discourse-cdn.com/elastic/original/3X/6/7/6774636e03e631a52e6143d46918e9f6c5647501.png)  
 ![aws2](https://us1.discourse-cdn.com/elastic/original/3X/d/4/d4238aae63f8d153ce7fe25ddffe53cb88fd37e4.png)

So my question is bro How my agent will query the AWS Cloud Watch?  
I think I will have to put those Keys in order my agent to query the logs from Cloud Watch?

Thanks again for the help bro.

---

<div class="post-metadata">

**Author:** ![laale1](https://avatars.discourse-cdn.com/v4/letter/l/90ced4/32.png) [@laale1](https://discuss.elastic.co/u/laale1)\
**Post date:** [November 14, 2023, 11:01am UTC](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459/6 "2023-11-14T11:01:37Z")

</div>

I finally ingested Cloud watch logs using elastic agent integration I have to put the is access key, secret key and log group Name.

thanks @leandrojmp I fallowed the steps you mentioned.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 12, 2023, 11:01am UTC](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459/7 "2023-12-12T11:01:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
