Ingest your AWS CloudTrail data into the Sumo Logic service to gain real-time operational insights, audit reports, and powerful visualization tools.
Why the Sumo Logic App for AWS CloudTrail?
Analyze changes
Receive real-time alerts to suspicious activity, changes to infrastructure like started/stopped virtual servers, and changes to access control lists (ACLs).
Share critical data
Develop customized visual dashboards to report on environmental strengths and weaknesses and share critical data quickly with the right teams.
Secure your environment
Perform root-cause analysis on performance by tracking the effects of changes on the your infrastructure’s availability and response time.
What is AWS CloudTrail?
AWS CloudTrail is a web service that records your AWS application program interface (API) calls and delivers complex log files to you for audit and analysis. AWS Cloudtrail records the following API information:
- The identity of the API caller.
- The time of the API call.
- The source IP address of the API caller.
- The request parameters.
- The response elements returned by the AWS service.
With the Sumo Logic app for AWS CloudTrail, gain deep visual insights into your environment through interactive, customizable dashboards.
Log Analysis You Can Use
Delve deep into CloudTrail activity patterns for actionable insights. Monitor statistics like:
- Administrator and user activity, isolatable by location to easily identify traffic from unauthorized regions.
- Platform configuration changes like such as new virtual machines, ACL changes and more.
- Account settings, usage and billing status for all your AWS services.
- Monitor platform configuration changes such as new VM configurations, ACL changes etc.
With the Sumo Logic app for AWS CloudTrail, gain instant visual insights, track and correlate AWS CloudTrail data, and integrate it with other AWS services data for complete monitoring and security.
Ingest CloudTrail Data into Sumo Logic Using S3
Gathering your CloudTrail data in one place is extremely easy. Dumping your logs into an S3 bucket for simple collection by a cloud-native log analysis service such as Sumo Logic allows:
- A scalable, elastic architecture that can grow with your business.
- Comprehensive compliance certifications (PCI v3 Service Provider Level 1, SOC2 Type 2, HIPAA, Safe Harbor) to ensure the security you need.
- Rich out-of-box integrations to key AWS services to enable fast time-to-value.
- Ready to get more insight into your AWS CloudTrail logging activity? Sign up for your free Sumo Logic trial today!
ELK Stack Compatability
Logstash (along with Elasticsearch and Kibana) offers an opportunity to parse, search and visualize this information. This provides great insight when Logstash is up and running, but it needs to be setup and managed to provide valuable insights even when Logstash forwarders go down. In addition, managing this infrastructure can be a challenge at scale.
Sumo Logic provides native cloud-to-cloud collection directly from an S3 bucket for CloudTrail information. Since the collection is cloud-to-cloud, administrators are not relied upon to keep the logging infrastructure up and running. You can count on Sumo Logic for valuable insights through outages.
Analyzing Your CloudTrail Data
Watch our demo to see the Sumo Logic app for CloudTrail in action.
Other Sumo Apps
Sumo Logic Apps help you quickly gain visibility into your applications and infrastructure by providing preconfigured searches and dashboards for your most popular data sources.
See the full list
Sumo Logic App for Artifactory
Gain real-time continuous intelligence from development to...
Sumo Logic App for MongoDB
Monitor, optimize and secure your MongoDB deployments in...
Sumo Logic App for Data Volume
The Sumo Logic App for Data Volume allows you to view at a...
Sumo Logic App for AWS
New tools and services designed for the volume, variety and...
Sumo Logic Integrated Threat Intelligence
Powered by CrowdStrike, increase velocity & accuracy of...
Mac OS X Log Analyzer
With the Sumo Logic App for Mac OS X, you can centralize and...
Sumo Logic App for AWS Lambda
With Sumo Logic’s cloud-native data analytics...
Sumo Logic App for AWS CloudTrail
Feed your AWS CloudTrail data into the Sumo Logic service to...
Sumo Logic App for Azure Audit
Ingest your Microsoft Azure Audit Log and Active Directory...
Sumo Logic App for Azure Network Watcher
Ingest your Microsoft Azure Audit Log and Active Directory...
Sumo Logic App for Amazon CloudFront
Analyze and correlate your AWS CloudFront data with the origin...
Sumo Logic App for AWS Elastic Load Balancing
Analyze raw AWS ELB data to determine latency and optimize...
Sumo Logic App for Amazon S3
Examine critical elements of your S3 service including access...
Sumo Logic App for Amazon VPC Flow
Feed your VPC Flow Logs directly into the Sumo Logic...
Sumo Logic App for Azure Web Apps
Feed your VPC Flow Logs directly into the Sumo Logic...
Sumo Logic App for Amazon Inspector
Feed your VPC Flow Logs directly into the Sumo Logic...
Sumo Logic App for Evident.io Evident Security Platform (ESP)
Feed your VPC Flow Logs directly into the Sumo Logic...
Sumo Logic App for OneLogin
Feed your VPC Flow Logs directly into the Sumo Logic...
Amazon Kinesis Connector
The Sumo Logic AWS Kinesis Connector enables real-time AWS...
Sumo Logic App for AWS Config
The Sumo Logic app for AWS Config delivers real-time...
Sumo Logic App for Salesforce
The Sumo Logic App for Salesforce helps provide visibility...
Sumo Logic App for Trend Micro Deep Security
The Sumo Logic App for Trend Micro Deep Security helps provide...
Sumo Logic App for Zscaler Web Security
The Sumo Logic App for Zscaler Web Security helps provide...
Sumo Logic App for CrowdStrike Falcon Platform
See how the Sumo Logic App integrates with CrowdStrike Falcon...
Sumo Logic App for Office 365
The Sumo Logic App for Office 365 helps provide visibility...
Sumo Logic App for Github
Use the Sumo Logic App for GitHub to gather key metrics on...
Sumo Logic App for Docker
Sumo Logic delivers a comprehensive strategy for monitoring...
PCI Compliance App Framework
With ready-made Dashboards that monitor each aspect of PCI...
Sumo Logic App for Akamai
Content Delivery Networks such as Akamai enable enterprises to...
Sumo Logic App for Fastly
Content Delivery Networks such as Fastly enable enterprises to...
Sumo Logic App for Box
Sumo Logic Application for Box helps you monitor both end user...
Sumo Logic App for Linux
Sumo Logic application for Linux helps you troubleshoot and...
Sumo Logic App for Google
App for Google Apps allows you to monitor and analyze all of...
Sumo Logic App for Nginx
Identify application and service performance issues such as...
Sumo Logic App for Apache
Centralize, analyze, and visualize the performance and...
Sumo Logic App for Apache Tomcat
Sumo Logic App for Apache Tomcat monitors server operations,...
Sumo Logic App for Windows
Windows Server events contain valuable information related to...
Sumo Logic App for Windows Performance
Sumo Logic App for Windows Performance provides insight into...
Sumo Logic App for IIS
Sumo Logic application for IIS log files helps administrators...
Sumo Logic App for Cisco
In today’s increasingly distributed enterprise environments,...
Sumo Logic Preview App for Observable Networks
Sumo Logic App for Observable Networks allows you to monitor...
Sumo Logic App for MySQL
Aggregate your MySQL logs into the Sumo Logic service and get...
Sumo Logic Preview App for Microsoft SQL Server
Sumo Logic App for Microsoft SQL Server provides insight into...
Sumo Logic App for Microsoft Windows Active Directory
Through the Sumo Logic application for Active Directory, IT...
Sumo Logic Preview App for PagerDuty
Sumo Logic App for PagerDuty collects incident messages from...
Sumo Logic App for VMware
Collect and centralize logs from the entire VMware...
Sumo Logic App for Varnish
Identify traffic sources and most requested products and...
Sumo Logic App for Palo Alto Networks
Palo Alto Networks firewalls provide visibility and granular...
Sumo Logic Quickstart
Whether you are new to log management or plan to migrate from...
ServiceNow Integration
The industry-leading partnership between Sumo Logic and...
Aqua Integration
With Scalock, you can secure your container environment...
ExtraHop Integration
ExtraHop’s wire data analytics platform provides a rich...
Heroku Integration
Sumo Logic provides an integration for Heroku that fully...
Slack Integration
Send alerts from scheduled search as a post to a Slack...
HipChat Integration
Webhook Connections for HipChat allow you to send scheduled...
