Skip to content

Commit

Permalink
add note to clarify which RDS logs are ingested into OpenSearch
Browse files Browse the repository at this point in the history
  • Loading branch information
markdboyd committed Dec 5, 2024
1 parent 2329d5a commit d6aed1b
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions _posts/2024-11-21-new-logging-system.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
layout: post
date: November 21st, 2024
title: "Announcing Cloud.gov Logging system update"
excerpt: The Cloud.gov is upgrading the current application logging system in December 2024, and decommissioning the old system.
excerpt: The Cloud.gov is upgrading the current application logging system in December 2024, and decommissioning the old system.
---


Expand All @@ -25,7 +25,7 @@ The current logging system is based on a branch of the [Elastic ELK stack ](http
* Meets M-21-31 requirements for live logging access
* Better tenant isolation: The updated system uses OpenSearch Organizations and a new authorization system to improve multitenancy. The new architecture resolves a variety of errors for customers.
* Better performance, better security, and better upgrade paths
* New: Logs for brokered RDS database instances are now available
* New: Logs for brokered RDS database instances are now available. [**Please note that only databases which are configured to publish their logs to CloudWatch will have their logs ingested into our new logging system**](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.Procedural.UploadtoCloudWatch.html).
* New: JSON log parsing. JSON logs are now ingested using the [flat_object field type in OpenSearch](https://opensearch.org/docs/latest/field-types/supported-field-types/flat-object/). [The flat_object field type allows for searching nested fields of a JSON object using dot notation](https://opensearch.org/docs/latest/field-types/supported-field-types/flat-object/#using-flat-object) but does not require the overhead of custom fields in the index, which is more performant and prevents custom logs from being dropped because of index field limits.
* Coming Soon:
* Support for alerting, and routing alerts to external systems
Expand Down

0 comments on commit d6aed1b

Please sign in to comment.