AWS moduleedit

This functionality is in beta and is subject to change. The design and code is less mature than official GA features and is being provided as-is with no warranties. Beta features are not subject to the support SLA of official GA features.

This is a module for aws logs. It uses filebeat s3 input to get log files from AWS S3 buckets with SQS notification. This module supports reading s3 server access logs with s3access fileset and ELB access logs with elb fileset. Access logs contain detailed information about the requests made to these services.

Example dashboardedit

This module comes with a sample dashboard for s3access fileset:

filebeat aws s3access overview

s3access fileset settingsedit

Example config:

- module: aws
    enabled: true
    var.credential_profile_name: fb-aws
AWS SQS queue url.
AWS credential profile name.


For a description of each field in the module, see the exported fields section.