AWS CloudTrail Logs OpenTelemetry Assets
Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability This functionality is in technical preview and is ready for evaluation. Use with caution in production; it is not recommended for mission-critical workloads. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Specific Support terms apply. Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability This functionality is in technical preview and is ready for evaluation. Use with caution in production; it is not recommended for mission-critical workloads. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Specific Support terms apply. The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability This functionality is in technical preview and is ready for evaluation. Use with caution in production; it is not recommended for mission-critical workloads. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Specific Support terms apply. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Serverless Observability
Preview
Preview
Serverless Security
Preview
Preview
Stack
Preview
9.2+
Preview since 9.2
| Version | 0.3.0 Availability Preview This functionality is in technical preview and is ready for evaluation. Use with caution in production; it is not recommended for mission-critical workloads. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Specific Support terms apply. (View all) |
| Subscription level What's this? |
Basic |
| Developed by What's this? |
Elastic |
| Minimum Kibana version(s) | 9.2.0 |
To use pre-release integrations, go to the Integrations page in Kibana, scroll down, and toggle on the Display beta integrations option.
This package contains Kibana assets for monitoring AWS CloudTrail Logs.
ECF is the simplest way to configure AWS CloudTrail log collection. Refer to the ECF for AWS documentation for full setup instructions.
Any OTel-supported collection method is supported provided the required extension is included.
This package has been tested with OpenTelemetry Collector version 0.138.0. The OpenTelemetry components used are awss3receiver, awslogsencodingextension, and elasticsearchexporter.
extensions:
awslogs_encoding/cloudtrail:
format: cloudtrail
receivers:
awss3:
sqs:
queue_url: "<sqs-url>"
region: "<region>"
s3downloader:
region: "<region>"
s3_bucket: '<bucket_name>'
s3_prefix: 'AWSLogs/<account-id>'
encodings:
- extension: awslogs_encoding/cloudtrail
exporters:
elasticsearch/otel:
endpoints: https://<host>:<port>
api_key: <api_key>
service:
extensions: [awslogs_encoding/cloudtrail]
pipelines:
logs:
exporters: [elasticsearch/otel]
receivers: [awss3]
This integration includes one or more Kibana dashboards that visualizes the data collected by the integration. The screenshots below illustrate how the ingested data is displayed.
Changelog
| Version | Details | Minimum Kibana version |
|---|---|---|
| 0.3.0 | Enhancement (View pull request) Add tags to Kibana assets |
9.2.0 |
| 0.2.0 | Enhancement (View pull request) Use standardized asset naming convention |
9.2.0 |
| 0.1.0 | Enhancement (View pull request) Initial draft of the AWS CloudTrail Logs OpenTelemetry Assets package |
9.2.0 |