Creating S3 Import Rules
Tell Scanner which S3 files to index and how to parse them.
Last updated
Was this helpful?
Tell Scanner which S3 files to index and how to parse them.
Last updated
Was this helpful?
After linking your AWS account and S3 buckets, you need to create S3 Import Rules for each bucket. These rules determine:
Which files are indexed
How the files will be read and parsed
Which destination index these log events will go into
Most Scanner users have their logs separated at the bucket level. E.g. you may have your AWS CloudTrail logs in the my-cloudtrail-logs bucket, Okta logs in the my-okta-logs bucket. If that is the case, you will only need one import rule per bucket.
S3 Import Rules can be previewed using the built-in .