Comments (4)
Hello,
I agree that would be nice to have lookups for multiple AWS accounts.
As far I can see, this plugin should be developed taking into account that it's very common to run Graylog inside AWS infrastructure and also that is very common to have more than one AWS account you would like to collect logs from, without forget that there are multiple ways to implement the authentication process (secret keys, cross accounts, IAM roles...)
Right now, the lookup processor is configured at same level that the generic settings for the plugin.
Maybe, to implement this feature the lookup processor should be refactored to some kind of multi-instance service with it's own configuration page, allowing CRUD operations of processor instances (maybe a new configuration page for the processor, accessible from the plugin configuration page?)
from graylog-plugin-aws.
👍 from me.
It'd be great if this plugin could tell that the running host was an EC2 instance and if so, provide an option to use its IAM Role instead of hardcoded credentials.
Just noticed @radykal-com's comment on #57 which addresses my use-case:
This functionality is already implemented. If you don't specify the keys in the input config, it will try to authenticate using the roles assigned to the instance profile.
from graylog-plugin-aws.
We have a single cluster of graylog servers ingesting logs from multiple AWS accounts, so if we leave the key fields blank and it uses an IAM role, I would imagine it's still only going to use the role for the account where the graylog server is and only look up instance details from that account - is that correct? In which case, it doesn't solve the original issue, which is looking up details for logs from other AWS accounts.
from graylog-plugin-aws.
Exactly, the plugin doesn't support right now to run instances lookup in multiple accounts.
from graylog-plugin-aws.
Related Issues (20)
- Include GZIP fix from 2.5 branch
- Application didn't checkpoint at end of shard HOT 8
- Travis shows "This is not an active repository" HOT 4
- CloudTrail stacktrace HOT 2
- Check support for AWS US Gov East region HOT 1
- Processing logs direct from Kinesis (NOT via cloudwatch logs)? HOT 8
- Newlines in cloudwatch logs cause trunction HOT 4
- better example needed for creating permissions.json HOT 2
- Handle cloudtrail message where the message is not json HOT 4
- Missing SLF4J bindings for Log4j HOT 1
- Encrypt secrets in AWSPluginConfiguration
- How to connect kinesis when using SSL HOT 1
- Missing AWS regions HOT 3
- Unable to remove default secret key in System->Configuration
- CloudTrial Input: sort elements in region list
- Improved handling of unnecessary Cloudtrail messages HOT 1
- JsonMappingException on missing userIdentity in CloudTrailRecord
- Plugin not using proxy server
- Indefinite errors occur if the AWS Logs/Flow Logs inputs are quickly started/stoped HOT 1
- KinesisConsumer application name not unique across multiple instances of graylog HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from graylog-plugin-aws.