Solved: AWS Cloud trail logs ingestion - Page 2

rahul7514 · 11-08-2024 07:10 PM

Hi

I have recently onboarded AWS cloud trail logs via S3 mechanism , however due to some issues we were asked to see if we can onboard the same logs via SQS mechanism , can some one tell me whether the logs ingested in both this way will be identical or will there be changes , if yes then what kind of changes ?

Ben_T

To further clarify, while S3 and SQS offer different ingestion mechanisms, the underlying parsing of AWS CloudTrail logs should both utilize the dedicated AWS_CLOUDTRAIL parser so you shouldn't see a difference in how the data is parsed.

View solution in original post

Webinar May 29th: Log Ingestion: Bindplane + Google SecOps

AWS Cloud trail logs ingestion