AWS-Cloudtrail & AWS-Cloudwatch integration

Aws-Cloudtrail & Aws-Cloudwatch Integrations

Follow the below steps to configure AWS Cloudtrail & Cloudwatch logs

Download filebeat.rpm package

After installing the filebeat package change the directory to filebeat

#sudo vi /etc/filebeat/filebeat.yml

Add below configuration in the file.

Go to Logstash-Output section and modify host and port details.

Start the filebeat service.

#sudo systemctl start filebeat