Esta página no se ha traducido a su idioma. Solicitar traducción

Consume LogServ with SIEM solution

PDF

Customers can integrate their logs with Security Information and Event Management (SIEM) solutions, such as Splunk, for troubleshooting and prevention with log analysis. SIEM users can search data at rest within their Amazon S3 buckets directly from their SIEM Cloud Platform stack. Federated Search for Amazon S3 is supported via an integration with AWS Glue Data Catalog, which provides the schema and metadata necessary to read compatible datasets from Amazon S3.

Data Flow description:

1. An AWS Glue crawler crawls log files in Amazon S3.

2. The crawler creates tables for log files.

3. SIEM users can analyze log using the Federated Search for Amazon S3.