AWS Load Balancer

This tutorial demonstrates how to collect your AWS Elastic Load Balancers, Application Load Balancers, and Network Load Balancers using Elastic Load Balancing. The data, decrypted and retaining original timestamps, is sent to Coralogix. The process is installation-free and entails simply deploying a Lambda function.

Once ingested by Coralogix, view and analyze your logs on our platform using queries, alerts, visualizations, and ML capabilities.

Prerequisites

AWS account with permissions to create Lambdas and IAM roles
An operating load balancer that writes its access log to S3
An S3 bucket clear of any triggers and with a policy that grants the load balancer permission to write access logs to the bucket

Installation

STEP 1. Navigate to Coralogix Lambda creation.

STEP 2. Fill in the required parameters.

STEP 3. Check the checkbox: "I acknowledge that this app creates custom IAM roles and resource policies."

STEP 4. Deploy.

Parameters & Descriptions

Variable	Description
Application Name	Stack name of the application created via AWS CloudFormation.
If your log is JSON format, use its dynamic value.
Example: `$.level1.level2.value`
NotificationEmail	Failure notification email address
ApplicationName	Application name as it appears in your Coralogix UI
BlockingPattern	If you wish to block some of the logs adding a substring will act as selector.
Default is empty to send all logs.
BufferSize	Buffer size for logs in the lambda function
CoralogixRegion	Region [Europe, Europe2, India, Singapore, or US] associated with your Coralogix account domain
Debug	Coralogix logger debug mode
FunctionArchitecture	Function supports x86_64 or arm64
FunctionMemorySize	Max memory for the function itself
FunctionTimeout	Maximum time in seconds the function may be allowed to run
NewlinePattern	Pattern for lines splitting. Default is `(?:\r\n\|\r\|\n)`.
S3BucketName	Name of the S3 bucket to watch
S3KeyPrefix	The S3 path prefix to watch, if you want to watch a particular subfolder within the bucket
S3KeySuffix	S3 path suffix to watch
SamplingRate	Sets the sampling rate
SsmEnabled	True if you want to store your coralogix private_key as a secret and False if you do not
SubsystemName	Subsystem name as it appears in your Coralogix UI. If your log is JSON format, can use its dynamic value, for example: `$.level1.level2.value`.
CustomDomain	Coralogix custom domain. Leave empty if you do not use a custom domain.
PrivateKey	Your Coralogix Send-Your-Data API Key
LayerARN	Your Coralogix SSM Layer ARN

Additional Resources


Blog	How to Get the Most Out of Your ELB Logs

Support

Need help?

Our world-class customer success team is available 24/7 to walk you through your setup and answer any questions that may come up.

Feel free to reach out to us via our in-app chat or by sending us an email at [email protected].

AWS Kinesis with Logstash