⇤ ← Revision 1 as of 2021-11-22 23:23:13
359
Comment:
|
397
FlowLog part of Cloudwatch
|
Deletions are marked like this. | Additions are marked like this. |
Line 1: | Line 1: |
## page was renamed from AWS/FlowLog |
AWS/FlowLog
- Flow logs is network packet flow logs, can be used for advanced troubleshooting and monitoring.
Once enabled, captured under CloudWatch vpc-flow-log/vpc-00123456-acct-name
e.g. filter for Logs Insights
filter protocol == '6' and dstPort == 443 and substr(srcAddr, 0,6) != '10.20' | stats count() by srcAddr