Analyzing CloudTrail Logs using Amazon Elasticsearch

Log management and analysis for many organizations starts and ends with just three letters: E, L, and K, which stands for Elasticsearch, Logstash, and Kibana. These three open-sourced products are essentially used together to aggregate, parse, search, and visualize logs at an enterprise scale:

  • Logstash: Logstash is primarily used as a log collection tool. It is designed to collect, parse, and store logs originating from multiple sources, such as applications, infrastructure, operating systems, tools, services, and so on.
  • Elasticsearch: With all the logs collected in one place, you now need a query engine to filter and search through these logs for particular events. That's exactly where ...

Get Implementing AWS: Design, Build, and Manage your Infrastructure now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.