From the course: AWS Certified Security - Specialty (SCS-C03) Cert Prep

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Normalizing and Analyzing Logs

Normalizing and Analyzing Logs - Amazon Web Services (AWS) Tutorial

From the course: AWS Certified Security - Specialty (SCS-C03) Cert Prep

Start my 1-month free trial Buy for my team

Normalizing and Analyzing Logs

“

In this lesson, I'm going to cover normalizing and analyzing logs. So what does this mean? Normalizing logs means turning different log formats into a consistent structure so they're easier then to search and compare data. Passing logs helps you pull out key details, maybe IP addresses or error codes or user actions instead of actually reading the raw text. Correlating logs lets you connect events across systems so you can see the full story behind an issue or security event. And these steps essentially make it easier to find problems, spot patterns, and understand what's happening across your environment. Now one service we can use is Amazon OpenSearch service. So OpenSearch can connect to many different sources. So essentially it can take the data from these different sources. It helps you to store and index large volumes of logs so you can then search them quickly using filters, fields, and queries. And it parses fields from logs automatically or with custom pipelines, turning your…

Contents