Amazon CloudWatch pipelines adds GeoIP, RDS, and XML processors

Amazon CloudWatch pipelines now includes three new processors that parse and enrich log data during ingestion: RDS log parser, XML parser, and GeoIP enrichment processor.

• RDS processor parses Aurora audit and error logs into structured queryable fields
• XML parser converts XML strings within fields into JSON format
• GeoIP processor enriches IP addresses with geographic context like city, country, and coordinates
• Available at no additional cost in all AWS Regions where CloudWatch pipelines is available
• Processors can be used independently or combined in a single pipeline
• Accessible via AWS Management Console, AWS CLI, and AWS SDKs

These new processors enable better log analysis for compliance reporting, security analysis, and data enrichment without additional infrastructure management.