Skip to main content

Forward

Forward telemetry data to object storage backends such as AWS S3

Forward telemetry data

Last9 control plane allows forwarding telemetry data to object storage such as AWS S3 without storing it. Forwarding capability is useful for forwarding certain logs that are not useful for frequent querying but only need to be stored for compliance.

info

The forwarded telemetry is stored in .gz format in the AWS S3 bucket.

Configure AWS S3 backend

Before creating the forward rule, configure an AWS S3 bucket where Last9 can forward telemetry data using IAM AssumeRole.

Configure Cold Storage

Create a new forward rule

Head to the Control Plane and create a new Forward Rule.

Control Plane — New Forward Rule

To drop incoming data, you can configure rules with == and != matching filters. Do note that this data is not ingested and cannot be recovered. To verify the filters before saving the rule, you can click on "View in Dashboard."

Control Plane — Add New Forward Rule

Supported Telemetry data types

Supported telemetry types are logs and traces. The supported storage backend is AWS S3.

Troubleshooting

Please get in touch with us on Discord or Email if you have any questions.