AWS::Elasticsearch::Domain LogPublishingOption - AWS CloudFormation

AWS::Elasticsearch::Domain LogPublishingOption

Specifies whether the Amazon ES domain publishes the Elasticsearch application, search slow logs, or index slow logs to Amazon CloudWatch. Each option must be an object of name SEARCH_SLOW_LOGS, ES_APPLICATION_LOGS, INDEX_SLOW_LOGS, or AUDIT_LOGS depending on the type of logs you want to publish. See here for the full syntax.

If you enable a slow log, you still have to enable the collection of slow logs using the Elasticsearch REST API. To learn more, see Setting Elasticsearch Logging Thresholds for Slow Logs.


To declare this entity in your AWS CloudFormation template, use the following syntax:


{ "CloudWatchLogsLogGroupArn" : String, "Enabled" : Boolean }


CloudWatchLogsLogGroupArn: String Enabled: Boolean



Specifies the CloudWatch log group to publish to.

Required: No

Type: String

Update requires: No interruption


If true, enables the publishing of logs to CloudWatch.

Default: false.

Required: No

Type: Boolean

Update requires: No interruption

See also