Suggestion for AWS Cloudtrail Logging!


We have multiple cloudtrail accounts in our s3 bucket. eg:-

my- bucket --> AwsLogs --> 12312312312 --> team-x
12312312222 --> team-y
22222222222 --> team-z

We want to ingest all the logs via logstash but we want to name the index based on each account number.

So when logstash tries to ingest data from 12312312312 folder/prefix it should index it with name team-x-YYYY-MM-DD and so on with other prefixes as well.

Let me know if you wanna know or want me to explain more on my need.


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.