Deliver decompressed Amazon CloudWatch Logs to Amazon S3 and Splunk using Amazon Data Firehose
Big Data Blog
This article describes how to use Amazon Data Firehose to deliver decompressed Amazon CloudWatch Logs to Amazon S3 and Splunk destinations for data analytics, security analysis, and application troubleshooting.
Specifically, the article covers:
- Decompress CloudWatch Logs for Splunk by enabling decompression and message extraction options in Firehose
- Decompress CloudWatch Logs for Amazon S3 and use features like dynamic partitioning and record format conversion with decompressed data
- Migration steps for existing Firehose streams to take advantage of the decompression feature
- Pricing information for the decompression feature
- Conclusion and additional resources
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Jul 31
2024
2024
Deliver Amazon CloudWatch logs to Amazon OpenSearch Serverless
Apr 16
2024
2024
Mask sensitive Amazon DocumentDB log data with Amazon CloudWatch Logs data protection
Jun 29
2026
2026
Amazon S3 server access logs now deliver to Amazon CloudWatch Logs and Amazon S3 Tables
Feb 23
2024
2024
Accelerate troubleshooting with structured logs in Amazon CloudWatch
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.