Fastly

Scanner supports Fastly access logs, which contain information about HTTP requests processed by Fastly's Content Delivery Network (CDN). In order for Scanner to see these logs, you can configure Fastly to publish them to S3.

Step 1: Publish to S3

You can configure Fastly to write logs to an S3 bucket using its log streaming feature. Follow the Fastly documentation to configure it to write log events to S3. See: Log streaming: Amazon S3.

Note: Make sure to set the log line format to Blank, which is the default. This is important to make sure Fastly writes log events properly in JSON format. See: Changing log line formats.

Step 2: Ingest via Scanner Collect

Follow Create an Index Rule to ingest logs from S3 via Scanner Collect.