Logging versions

By default, the Verified Access logging system uses Open Cybersecurity Schema Framework (OCSF) version 0.1. Sample logs using version 0.1 can be seen in the OCSF version 0.1 examples section.

The latest logging version is compatible with OCSF version 1.0.0-rc.2. Specific details on the on the schema can be found here OCSF Schema. Sample logs using version 1.0.0-rc.2 can be seen in the OCSF version 1.0.0-rc.2 examples section.

Upgrade logging version

If you want to upgrade the logging version being used, follow the procedure below.

To upgrade the logging version using the console

1. Open the Amazon VPC console at https://console.aws.amazon.com/vpc/.

2. In the navigation pane, choose Verified Access instances.

3. Select the appropriate Verified Access instance.

4. On the Verified Access instance logging configuration tab, choose Modify Verified Access instance logging configuration.

5. Select ocsf-1.0.0-rc.2 from the Update log version drop-down list.

6. Choose Modify Verified Access instance logging configuration.

To upgrade the logging version using the AWS CLI

Use the modify-verified-access-instance-logging-configuration command.