Skip to main content

AWS Data Sinks and Security Lake (v8.240515)

Sysadmin
Sysadmin
Fluency Sysadmin

A release focused on AWS: new Kinesis, Lambda and Firehose data sinks, AWS Security Lake support, and authentication by EC2 instance role. Multi-tenant sites gain Syslog Ports and Setup Review pages in tenant view, and the Fluency Collector can receive HEC and RabbitMQ data.

Changes​

Multi-tenant mode​

  • New Syslog Ports management page in tenant view.
  • New Setup Review page in tenant view.

Platform​

  • New data sinks: Amazon Kinesis, AWS Lambda and Amazon Data Firehose.
  • New data source: Amazon Kinesis data streams, so the platform reads from and writes to Kinesis directly.
  • AWS Security Lake support. See Amazon Security Lake.
  • AWS EC2 instance role support, with an AWS Instance Role management page (beta).

See also Kinesis Firehose.

Fluency Collector​

  • An HEC endpoint on the collector. See HEC.
  • A RabbitMQ queue receiver.

FPL​

  • jsonClone() copies a JSON object — for example, to fork one alert that names several users into one event per user.
  • run(lambda, arguments...) calls a lambda, so a lambda can be passed as a variable or a function argument.

Fixes​

  • Fixed a bug in the CEF decoder.
  • Fixed a bug in Fluency_ResourceLoad.