Deliver decompressed Amazon CloudWatch Logs to Amazon S3 and Splunk using Amazon Data Firehose
Big Data Blog
This article describes how to use Amazon Data Firehose to deliver decompressed Amazon CloudWatch Logs to Amazon S3 and Splunk destinations for data analytics, security analysis, and application troubleshooting.
Specifically, the article covers:
- Decompress CloudWatch Logs for Splunk by enabling decompression and message extraction options in Firehose
- Decompress CloudWatch Logs for Amazon S3 and use features like dynamic partitioning and record format conversion with decompressed data
- Migration steps for existing Firehose streams to take advantage of the decompression feature
- Pricing information for the decompression feature
- Conclusion and additional resources
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Jul 31
2024
2024
Deliver Amazon CloudWatch logs to Amazon OpenSearch Serverless
Nov 21
2024
2024
Amazon CloudWatch Logs launches the ability to transform and enrich logs
Oct 30
2025
2025
Handling sensitive log data using Amazon CloudWatch
Mar 17
2026
2026
Amazon CloudWatch Logs now supports log ingestion using HTTP-based protocol
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.