See Amazon Path Expressions.) The S3 bucket name is not part of the path. You can use a wildcard (*) in this string. Enter the string that matches the S3 objects you'd like to collect. Select the Amazon Region for your S3 bucket.

Enter a name to display for the new Source. To your Hosted Collector, add an AWS S3 Source.Grant Sumo Logic Access to the AWS S3 Bucket.Ĭonfigure a Sumo collector and source to receive AWS WAF logs .

Confirm that logs are being delivered to the S3 bucket.

Configure an AWS S3 bucket as the destination of the Kinesis Stream, as described in Amazon Kinesis Data Firehose Data Delivery in AWS help.

Enable WAF logging to a Kinesis Stream, as described in AWS help.

In the next step, you'll configure Sumo to collect logs from the bucket. In this step you set up AWS WAF to send log data to an S3 bucket using an Kinesis Data Firehose. If you can see the Add Integration button, follow the 'Before you begin' section in the 'Collect Logs' help page and then use the in-product instructions in Sumo Logic to set up the app. It is only enabled for certain customers while we gather Beta customer feedback.

Waf amazon