Cwlogs

CloudWatch Logs

• It is a regional public service
• Store, Monitor & Access logging data
• CWL has inbuilt integration with multiple aws services
• Anything outside AWS services use unified CloudWatch agent for logging into CWL
• Metrics data can be generated based on CWL using Metric Filter
• Log events are stored inside log streams
• Each log stream is for a specific instance of a specific service
• Log groups are groupings of similar log streams
• Configurations like retention settings can be defined on a log group.
• Metric Filters can also be defined at log group level
• Logs can be stored by creating an S3 Export using CreateExportTask. This is manual process & can take upto 12 hours. The data can not be encrypted with SSE-KMS but only with SSE-S3
• Realtime delivery of logs can be configured using CWL subscriptions