VPC Flow Log Setup

Install Integration

Confirm S3 Bucket

Ensure your logs are being sent to an S3 bucket. The following guide from Amazon will help you achieve this if you are not doing this already, you can choose the best way to achieve this, but cloudwatch or cloudtrail are a great place to start:

VPC Flow Logs Guide (opens in a new tab)

Ensure Adequate Bucket Permissions

The following permissions applied to the AWS IAM Policy being used:

• s3:ListBucket to check if the S3 bucket exists and list objects in it.
• s3:GetObject to check object metadata and download objects from S3 buckets.

Below is how your permissions should appear:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "SidID",
      "Effect": "Allow",
      "Action": ["s3:GetObject", "s3:ListBucket"],
      "Resource": ["arn:aws:s3:::your-bucket/*"]
    }
  ]
}

Configure Logstash for Amazon VPC

To start sending logs and metrics from AWS to your Stack you need to configure an AWS Input on your Logit.io Stack.

Check Logit.io for your logs

Data should now have been sent to your Stack.

If you don't see take a look at How to diagnose no data in Stack below for how to diagnose common issues.

How to diagnose no data in Stack

If you don't see data appearing in your Stack after following the steps, visit the Help Centre guide for steps to diagnose no data appearing in your Stack or Chat to support now.