Use Case: Correlating Cloudfront and WAF Events - Coralogix

Skip to content

Coralogix Raises $115M Series E to Fuel AI-Powered Observability

Learn more

Platform
Platform overview

Platform overview
Platform capabilities

Remote, index-free querying

Infinite retention

DataPrime engine

In-stream analysis & alerting

Cross-stack dashboards

Cost optimization tool
System

APM

Service catalog

DB monitoring

Service map

Serverless APM

Continuous profiling

Real user monitoring

Error tracking

Session replay

Core web vitals

Network monitoring

Infrastructure monitoring

Infrastructure explorer

Log analytics

Log templating

Parsing rules

Data enrichment
AI

AI discovery

AI observability

Evaluation engine

Dashboards

Session explorer

Cost tracking

AI guardrails

Quality guardrails

Security guardrails

AI for security and compliance

AI-SPM

Compliance reporting
Security

SIEM

CSPM

MDR

Solutions
Use cases

Edge security

Infrastructure monitoring

CDN monitoring

CI/CD Acceleration

AI hallucinations

IT operations

Data pipeline services
Industries

Finance

Video & streaming

Ecommerce

Healthcare

Gaming

Transportation

Cyber security
Technology

AWS

Azure

GCP

Kubernetes

Heroku

Developers
Docs

Getting started with Coralogix

Integration packages

DataPrime beginner’s guide

Account management

View all docs
Developer resources

Coralogix Academy

Integrations

Compliance
Popular integrations

OpenTelemetry

AWS ALB

Azure

GCP

View all 300+ integrations

Pricing

Customers

Company
Company

About

Careers

Events & webinars

Newsroom

Support

Partners
Resources

E-books & whitepapers

Guides

AI guides

Blog
AWS Summit Mumbai 2025

June 19, 2025 10:00 AM – 4:30 PM
Register now

Get a Demo Sign In

Get a Demo Sign In

0 of 0 completed

Introduction

Intro

Prerequisites

Consuming Edge & WAF Logs

Common Parsing Rules

Deploying extensions for well known data sources

Utilizing the Coralogix singles endpoint as an extensible ingest

Enhancing Data within Coralogix

Automatically detecting suspicious IPs

Decorating access logs with custom values

Enriching IP Addresses With Geo- Locational Information

Adding Bot Scores Using AWS Lambda, Enrichment and Dashboarding

Querying Access & WAF Logs

Analyzing huge volumes of logs in “All Logs” mode

Building Custom Views For Specific Data Sources

Leveraging Templates To Cut Through The Noise

Use Case: Correlating Cloudfront and WAF Events

Essential WAF & Edge Alarms

Alerting Overview

Googlebot Mistakenly Blocked By AWS WAF

Tracking the Early Signs of a DDOS Attack

Instant alarms for a new malicious IP Address

Visualizing Key CDN & WAF Measures

Parsing and Visualizing Fastly Data

Unlocking Dashboard Scale with "Monitoring Data"

Detecting Behavior in the Browser

RUM Overview

Tracking detailed user activity in Coralogix RUM

Why Web Vitals Matters For Security

Cost Optimization Techniques

The TCO Optimizer and Verbose Access Logs

Converting Logs To Important Metrics

Conclusion

Wrap Up and Next Steps

Edge And WAF Monitoring & Security
Querying Access & WAF Logs
Use Case: Correlating Cloudfront and WAF Events

Find out more at https://coralogixstg.wpengine.com/blog/coralogix-observability-at-edge/

Observability 
without compromising

Store infinitely, search instantly and cut through the noise  across every stack, region, and cloud

Get a Demo

Privacy Policy
Terms & Conditions
Cookies Policy
Trust Center
FAQs Coralogix AI Tools

© Coralogix inc. 2025

Platform
capabilities
Platform
Developers
Resources
Company

Be Our Partner

Complete this form to speak with one of our partner managers.

Thank You

Someone from our team will reach out shortly. Talk to you soon!