Ingest CloudWatch Logs
Last updated
Last updated
groundcover allows ingesting logs from CloudWatch by setting up an
Go to .
Click on Create Firehose stream
Source: Direct PUT
Destination: HTTP Endpoint
Create a name for your stream, for example PUT-Groundcover-logs
Destination settings:
HTTP endpoint URL: Firehose logs endpoint, fetched using
Access key: groundcover API token, fetching using
Content encoding: GZIP
Parameters:
env_name
- Specify your Environment
name, it will show up in this environment in the application
Backup settings:
Choose a backup bucket, or create a new one.
Click Create Firehose stream
Click on Roles in the side bar
Click on Create Role
Select Custom trust policy
Paste the following policy:
Click on Next twice (we'll attach permissions later)
Provide a name for the role
Click on Create Role
Go to your newly created role
In the Permissions section, click on Add permissions and then Create inline policy
Click on JSON and paste the following:
Click on Next
Give the policy a name
Click on Create Policy
Now that we're all set up, we can add a subscription filter to the desired log group in CloudWatch. Using CLI
The following is an example of how to create a subscription filter through the AWS CLI:
Using AWS Console
Click on Create
Select Create Amazon Data Firehose subscription filter
Select the Firehose delivery stream created in the previous steps, as well as the IAM role.
Fill Configure log format and filters as you need.
Choose a name for the subscription filter, then click Start streaming.
Go to
Go to the specific log group in and click on the Subscription filters tab.