AWS CloudTrail
User Guide (Version 1.0)

CloudWatch Log Group and Log Stream Naming for CloudTrail

Amazon CloudWatch will display the log group that you created for CloudTrail events alongside any other log groups you have in a region. We recommend that you use a log group name that helps you easily distinguish the log group from others. For example, CloudTrail/logs. Log group names can be between 1 and 512 characters long. Allowed characters include a-z, A-Z, 0-9, '_' (underscore), '-' (hyphen), '/' (forward slash), and '.' (period).

When CloudTrail creates the log stream for the log group, it names the log stream according to the following format: account_ID_CloudTrail_source_region.


If the volume of CloudTrail logs is large, multiple log streams may be created to deliver log data to your log group.