Forward
Forward telemetry data to object storage backends such as AWS S3
Forward telemetry data
Last9 control plane allows forwarding telemetry data to object storage such as AWS S3 without storing it. Forwarding capability is useful for forwarding certain logs that are not useful for frequent querying but only need to be stored for compliance.
The forwarded telemetry is stored in .gz
format in the AWS S3 bucket.
Configure AWS S3 backend
Before creating the forward rule, configure an AWS S3 bucket where Last9 can forward telemetry data using IAM AssumeRole.
Create a new forward rule
Head to the Control Plane and create a new Forward Rule.
To drop incoming data, you can configure rules with ==
and !=
matching filters. Do note that this data is not ingested and cannot be recovered. To verify the filters before saving the rule, you can click on "View in Dashboard."
Supported Telemetry data types
Supported telemetry types are logs and traces. The supported storage backend is AWS S3.
Troubleshooting
Please get in touch with us on Discord or Email if you have any questions.