AWS AmazonCloudWatch documentation change
Summary
Added Amazon RDS processor for structured log parsing and updated conditional processing note
Security assessment
Enables parsing of security-relevant RDS logs (audit/authentication) but doesn't fix vulnerabilities. Improves ability to analyze security logs through structured processing.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/parser-processors.md b/AmazonCloudWatch/latest/monitoring/parser-processors.md index d68f406a8..3f0976604 100644 --- a//AmazonCloudWatch/latest/monitoring/parser-processors.md +++ b//AmazonCloudWatch/latest/monitoring/parser-processors.md @@ -7 +7 @@ -OCSF processorCSV processorGrok processorVPC processorJSON processorRoute 53 processorKey-value processor +OCSF processorCSV processorGrok processorVPC processorJSON processorRoute 53 processorAmazon RDS processorKey-value processor @@ -15 +15 @@ Parser processors convert raw or semi-structured log data into structured format -Parser processors (except Grok) do not support conditional processing with the `when` parameter. This includes OCSF, CSV, JSON, KeyValue, VPC, Route53, WAF, Postgres, and CloudFront parsers. For more information, see [Expression syntax for conditional processing](./conditional-processing.html). +Parser processors (except Grok) do not support conditional processing with the `when` parameter. This includes OCSF, CSV, JSON, KeyValue, VPC, Route53, RDS, WAF, Postgres, and CloudFront parsers. For more information, see [Expression syntax for conditional processing](./conditional-processing.html). @@ -208,0 +209,12 @@ Configure the Route 53 processor with the following parameters: +## Amazon RDS processor + +Parses Amazon RDS Aurora log data into structured fields. The `parse_rds` processor is supported only when the pipeline's `data_source_name` is `amazon_rds`. It applies the parsing logic that matches the pipeline's `data_source_type`. + +###### Configuration + +Configure the Amazon RDS processor with the following parameters: + + + processor: + - parse_rds: {} +