AWS CloudWatch

LOGIQ CloudWatch exporter Lambda function
You can export AWS CloudWatch logs to LOGIQ using an AWS Lambada function. The AWS Lambda function can act as a trigger for a CloudWatch log stream. 
This guide explains the process for setting up an AWS Lambda function and configuring an AWS CloudWatch trigger to forward CloudWatch logs to LOGIQ.
Creating a Lambda function
LOGIQ provides a CloudFormation template to create the LOGIQ CloudWatch exporter Lambda function. 
1
https://logiqcf.s3.amazonaws.com/cloudwatch-exporter/cf.yaml
Copied!
You can also download the CloudFormation template from our client-integrations git repository.
This CloudFormation stack creates a Lambda function and its necessary permissions. You must configure the following attributes.
Parameter
Description
APPNAME
Application name - a readable name for LOGIQ to partition logs.
CLUSTERID
Cluster ID - a readable name for LOGIQ to partition logs.
NAMESPACE
Namespace - a readable name for LOGIQ to partition logs.
LOGIQHOST
IP address or hostname of the LOGIQ server.
INGESTTOKEN
JWT token to securely ingest logs 
Configuring the CloudWatch trigger
Once the CloudFormation stack is created, navigate to the AWS Lambda function (logiq-cloudwatch-exporter) and add a trigger. 
On the Add trigger page, select CloudWatch, and then select a CloudWatch Logs Log Group. 
Once this configuration is complete, any new logs coming to the configured CloudWatch Log group will be streamed to the LOGIQ cluster.

AWS S3

Next - INTEGRATIONS

Palo Alto Firewall

Last modified 18d ago

Export as PDF

Copy link

Contents

LOGIQ CloudWatch exporter Lambda function

Creating a Lambda function

Configuring the CloudWatch trigger