Amazon CloudWatch pipelines introduced three new processors to parse and enrich log data during ingestion: an Amazon RDS log parser, an XML parser, and a GeoIP enrichment processor.

Key Details

• Introduces an Amazon RDS processor that parses Aurora audit and error logs into structured fields for compliance reporting
• Adds an XML parser that converts embedded XML string fields into structured JSON payloads
• Adds a GeoIP enrichment processor that enriches IP address fields with geographic context including city, country, and coordinates
• Processors can be used independently or combined within a single pipeline
• Available at no additional cost in all AWS Regions where CloudWatch pipelines is generally available
• Processors can be configured via the AWS Management Console, AWS CLI, or AWS SDKs

In This Story