As the COVID-19 situation continues to evolve and organizations are having to adjust, Alert Logic is here for you, 24/7. Learn More

How do I know if Alert Logic can read CloudTrail logs?

Comments

5 comments

  • Official comment
    Avatar
    Rich Vorwaller

    Hi Andrew,

    Thanks for your post. Here are the answers to your questions.

    1. How do we know if Alert Logic is accessing CloudTrail logs? Currently, Cloud Insight Essentials (CIE) doesn't have a feature that shows customers if the service is able/not able to access your CloudTrail logs. However, we are looking at adding this functionality later. Essentially, CIE would raise a remediation in the event the service is not able to access CloudTrail logs and provide steps on how to resolve/troubleshoot the issue. We'll add you as a "+1" to this feature request, or if you have another idea let us know.
    2. Why don't I see a SQS queue and SNS topic for CIE? If properly configured, you should see a SQS queue and SNS topic in your AWS Management console for CIE. Based on your first question, my hunch is that CIE can't access your CloudTrail logs. I've gone ahead and opened up a support case for your question. You should hear from our support team shortly but ping us again if you have any questions.

    Thanks again. 

    Comment actions Permalink
  • Avatar
    Abby Kincer

    Hi Andrew -

    We're working on getting you a quality answer to your question and will get back to you very soon.

     
    0
    Comment actions Permalink
  • Avatar
    Andrew Scott

    Hey, I haven't heard anything from the support team regarding the SQS queue and SNS topic issue. Any chance anyone in the support team can contact me at some point?

    Regards,

    Andrew

    0
    Comment actions Permalink
  • Avatar
    Abby Kincer

    Andrew -

    I'm very sorry about this. I will track someone down this morning and make sure they get in touch with you and help you get your questions resolved.

    0
    Comment actions Permalink
  • Avatar
    Abby Kincer

    Andrew -

    Quick update to let you know that our Support and Engineering teams are currently investigating this and will get with you via Support ticket as soon as possible!

    0
    Comment actions Permalink

Please sign in to leave a comment.