Skip to content

aws.firewall: Document ingested log types of AWS Network Firewall #13978

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kcreddy merged 3 commits into from
May 23, 2025
Merged

aws.firewall: Document ingested log types of AWS Network Firewall #13978

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
f7afc44
Document ingested log types of AWS Network Firewall.
kcreddy May 23, 2025
2032a55
update pr number
kcreddy May 23, 2025
9e22c5c
Address PR suggestion
kcreddy May 23, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions packages/aws/_dev/build/docs/firewall.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,7 @@ For example, you could use this integration to view and track when firewall rule
The AWS Network Firewall integration collects two types of data: logs and metrics.

**Logs** help you keep a record of events happening in AWS Network Firewall.
All three types of logs recorded by [AWS Network Firewall](https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-logging.html) can be collected by the integration: `Flow`, `Alert` and `TLS` logs.
Logs collected by the AWS Network Firewall integration include the observer name, source and destination IP, port, country, event type, and more. See more details in the [Logs reference](#logs-reference).

**Metrics** give you insight into the state of Network Firewall.
Expand Down
5 changes: 5 additions & 0 deletions packages/aws/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "3.3.3"
changes:
- description: Update README - Document ingested log types of AWS Network Firewall.
type: enhancement
link: https://github.com/elastic/integrations/pull/13978
- version: "3.3.2"
changes:
- description: Update README - EC2 Instance IAM Role for AWS Authentication
Expand Down
1 change: 1 addition & 0 deletions packages/aws/docs/firewall.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,7 @@ For example, you could use this integration to view and track when firewall rule
The AWS Network Firewall integration collects two types of data: logs and metrics.

**Logs** help you keep a record of events happening in AWS Network Firewall.
All three types of logs recorded by [AWS Network Firewall](https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-logging.html) can be collected by the integration: `Flow`, `Alert` and `TLS` logs.
Logs collected by the AWS Network Firewall integration include the observer name, source and destination IP, port, country, event type, and more. See more details in the [Logs reference](#logs-reference).

**Metrics** give you insight into the state of Network Firewall.
Expand Down
2 changes: 1 addition & 1 deletion packages/aws/manifest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: 3.3.2
name: aws
title: AWS
version: 3.3.2
version: 3.3.3
description: Collect logs and metrics from Amazon Web Services (AWS) with Elastic Agent.
type: integration
categories:
Expand Down