Lacework

Scanner supports Lacework logs, which contain information related to monitoring, detection, and response capabilities across cloud environments. In order for Scanner to see these logs, you can configure Lacework to publish them to S3.

Step 1: Publish to S3

Follow the Lacework documentation to configure your logs to be exported to S3 via Lacework S3 Data Exporter.

See: S3 Data Exporter.

Step 2: Ingest via Scanner Collect

Follow the Create an Index Rule guide to ingest logs from S3 via Scanner Collect.