Usando AWS re:Post, accetti AWS re:Post Termini di utilizzo
AWS re:Postre:Post

Cannot send WAF logs to Kinesis

1

Hi all,

I have been struggling to send my WAF ACL (AWS Managed rules) logs to Kinesis via a data firehose delivery stream.

I have a web app running on an ALB and have that set as the associated resource in the AWS WAF console.

I have also enabled logging and set Amazon Kinesis Data Firehose delivery stream as the logging destination but i am not seeing any requests etc. in the Kinesis delivery stream, its marked as active and the source is direct PUT.

Any help would be appreciated, thank you in advance!

  • Ziad
    2 anni fa

    I'm having the same issue, and I see no error logs or any indication of errors. Any luck resolving this issue?

Argomenti
AnalisiSicurezza, identità e conformitàInternet delle cose (IoT)
Tag
Amazon Data FirehoseAWS WAFGestore di firewall AWSAmazon Kinesis
Lingua
English
AWS-User-7115262
posta 2 anni fa673 visualizzazioni
2 Risposte
0

There are a few troubleshooting steps in the documentation.

Can you check the CloudWatch / Events & Logs to see where it's breaking? That can help narrow down the issue as well.

AWS
Dan_H
con risposta 2 anni fa
  • Ziad
    2 anni fa

    No errors, and no logs showing up in Cloudwatch. I have the same issue and tried both from the admin account and the member account, both didn't work. Also, trying directly to send logs to Cloudwatch didn't work either.

0

So, according to a recent chat with AWS support on this issue looks like logging must be enabled at the same time the web ACL or the security policy is being created. The order matters so the associated permissions can be created accordingly. Enabling logging after the ACL/policy is created will not send any logs.

AWS need to indicate the proper steps needed for enabling logging after the fact that ACLs were created, unless this is a bug.

Ziad
con risposta 2 anni fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande

Contenuto pertinente