The Sumo Logic App for AWS CloudTrail

Log Analysis You Can Use

Delve deep into CloudTrail activity patterns for actionable insights. Monitor statistics like:

• Administrator and user activity, isolatable by location to easily identify traffic from unauthorized regions.
• Platform configuration changes like such as new virtual machines, ACL changes and more.
• Account settings, usage and billing status for all your AWS services.
• Monitor platform configuration changes such as new VM configurations, ACL changes etc.

With the Sumo Logic app for AWS CloudTrail, gain instant visual insights, track and correlate AWS CloudTrail data, and integrate it with other AWS services data for complete monitoring and security.

ELK Stack Compatability

Logstash (along with Elasticsearch and Kibana) offers an opportunity to parse, search and visualize this information. This provides great insight when Logstash is up and running, but it needs to be setup and managed to provide valuable insights even when Logstash forwarders go down. In addition, managing this infrastructure can be a challenge at scale.

Sumo Logic provides native cloud-to-cloud collection directly from an S3 bucket for CloudTrail information. Since the collection is cloud-to-cloud, administrators are not relied upon to keep the logging infrastructure up and running. You can count on Sumo Logic for valuable insights through outages.