Skip to main content
Sumo Logic

Amazon VPC Flow Logs

Amazon’s Virtual Private Cloud (VPC) Flow Logs log the IP network traffic of your VPC, allowing you to troubleshoot traffic and security issues. The Sumo Logic App for Amazon VPC Flow Logs leverages this data to provide real-time visibility and analysis of your environment. It consists of predefined searches and Dashboards.

For more information on Amazon VPC Flow Logs, see http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs.html

VPC Flow Logs can be published to Amazon CloudWatch Logs and Amazon S3. You can use either of these methods to collect Amazon VPC Flow Logs:

Each method has advantages. Using an AWS S3 source  is more reliable, while using a CloudFormation template allows you to customize your logs by adding more information and filtering unwanted data. In addition, the Security Groups dashboard relies upon customized logs, and so is populated only when you use  a CloudFormation template