Pull logs from AWS CloudWatch Log Groups into Dstl8.
From Sources, click Add Source and select AWS CloudWatch.
Give the source a unique name.
By default, CloudWatch log groups are auto-discovered from the account. To customize, expand Advanced config:
Auto Discover (default) — log groups are found automatically.
Log Groups — manually specify log groups, one per line (e.g. /aws/lambda/my-function). Use this when you want to limit ingestion to a known set.
AWS Access Key ID
From an IAM user or role with CloudWatch read access.
AWS Secret Access Key
Paired with the access key ID.
AWS Region
Region where your log groups live, e.g. us-east-1.
AWS Session Token (optional)
Required only when using temporary STS credentials.
Click Test Connection. You should see Connection successful.
Click Create to add the source.
The source appears in the list as Pending with 0 streams. Within a couple of minutes, CloudWatch events begin arriving, streams are detected, and the source transitions to Healthy. Each stream is listed with its inferred Stream Type (e.g. ec2/stage/clickhouse, eks, unknown).
Streams need to be assigned to a workspace to be accessible. Open the source's actions menu (gear icon) and select Assign Streams, then check the streams you want the Default workspace (or any other workspace) to receive and Save.
See Assigning streams to workspaces for details.
Add a separate CloudWatch source per AWS account or region rather than sharing credentials across environments.
Start with Auto Discover for the simplest setup; move to manual Log Groups when you need tighter control over what's ingested.
Last updated
