AWS CloudWatch Rule triggered by Log Event

Question

I want to create CloudWatch Rule that would be triggered upon creation of Log Event. For that reason as an event pattern I selected CloudWatch Logs service but when I try to generate some Cloud Watch logs the rule is not getting triggered. I can not find any example of using aws.logs as a source for an event and hence my question if I'm doing something wrong.

Answer 1

This is because the only events for logs available are AWS API Call via CloudTrail . CloudWatch Logs does not generate CloudWatch events on receiving new log entries.

For the Logs API call events to work, you need to setup CloudTrial trial .

However, if you want to trigger your lambda function based on log entries, I can recommend using subscription filters for lambda :

You can use subscriptions to get access to a real-time feed of log events from CloudWatch Logs and have it delivered to other services such as a Amazon Kinesis stream, Amazon Kinesis Data Firehose stream, or AWS Lambda for custom processing, analysis, or loading to other systems.