Get AWS CloudFront logs from S3

Graylog Central (peer support)
1

AWS CloudFront writes its logs to S3 in a bunch of files every few minutes. What’s the best way to fetch the latest files and ingest these with Graylog?

I am currently fetching them with Logstash and feeding them into Elastic for my old ELK stack, but I’m wondering if there’s a more Graylog way to do it. Logstash is kind of heavy to use just for this. But I installed logstash-output-gelf and connected it to Graylog and it is working.

2

(post withdrawn by author, will be automatically deleted in 24 hours unless flagged)

3

I see there’s graylog-plugin-s3 on github - but not updated for Graylog 3.x?

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.