Deploying LOGIQ
INTEGRATIONS
LOGIQ Monitoring
Vewing Logs
COMPLIANCE
LOGIQ STREAMING
LOGIQ Configuration
Log Ingest configuration
AWS CloudWatch
This guide explains how to export your AWS CloudWatch logs to LOGIQ.
LOGIQ CloudWatch exporter Lambda function
You can export AWS CloudWatch logs to LOGIQ using an AWS Lambada function. The AWS Lambda function acts as a trigger for a CloudWatch log stream.
This guide explains the process for setting up an AWS Lambda function and configuring an AWS CloudWatch trigger to forward CloudWatch logs to LOGIQ.
.png?alt=media&token=a5529d79-5073-47ec-90a9-da388c823e0a)
Creating a Lambda function
LOGIQ provides CloudFormation templates to create the LOGIQ CloudWatch exporter Lambda function.
Depending on the type of logs you'd like to export, use the appropriate CloudFormation template from the following list.
Exporting Lambda Function logs
Use the following CloudFormation template to export AWS Lambda function logs to LOGIQ.
1
https://logiqcf.s3.amazonaws.com/cloudwatch-exporter/logiq-cloudwatch-lambda-logs-exporter.yaml
Copied!
Exporting CloudTrail Logs
Use the following CloudFormation template to export CloudTrail logs to LOGIQ.
1
https://logiqcf.s3.amazonaws.com/cloudwatch-exporter/logiq-cloudwatch-cloudtrail-exporter.yaml
Copied!
Exporting AWS VPC Flowlogs
Use the following CloudFormation template to export Flowlogs logs to LOGIQ.
1
https://logiqcf.s3.amazonaws.com/cloudwatch-exporter/logiq-cloudwatch-flowlogs-exporter.yaml
Copied!
Exporting Cloudwatch logs from other services
Use the following CloudFormation template to export cloudwatch logs.
1
https://logiqcf.s3.amazonaws.com/cloudwatch-exporter/logiq-cloudwatch-exporter.yaml
Copied!
This CloudFormation stack creates a Lambda function and its necessary permissions. You must configure the following attributes.
Parameter
Description
APPNAMEApplication name - a readable name for LOGIQ to partition logs.
CLUSTERIDCluster ID - a readable name for LOGIQ to partition logs.
NAMESPACENamespace - a readable name for LOGIQ to partition logs.
LOGIQHOSTIP address or hostname of the LOGIQ server. (Without http or https)
INGESTTOKENConfiguring the CloudWatch trigger
Once the CloudFormation stack is created, navigate to the AWS Lambda function (
logiq-cloudwatch-exporter) and add a trigger. 
On the Add trigger page, select CloudWatch, and then select a CloudWatch Logs Log Group.
Once this configuration is complete, any new logs coming to the configured CloudWatch Log group will be streamed to the LOGIQ cluster.
Last modified 1mo ago
Export as PDF
Copy link