...
| Code Block |
|---|
{
"inputs": {
"sqs_collector": {
"id": "<FIVE_UNIQUE_DIGITS>",
"services": {
"custom_service": {<OPTIONS>,
"routing_template": "<DESTINATION TAG>"
}
},
"credentials": {
"aws_cross_account_role": "arn:<PARTITION>:iam::<YOUR_AWS_ACCOUNT_NUMBER>:role/<YOUR_ROLE>",
"aws_external_id": "<EXTERNAL_ID>"
},
"region": "<REGION>",
"base_url": "https://sqs.<REGION>.amazonaws.com/<YOUR_AWS_ACCOUNT_NUMBER>/<QUEUE_NAME>"
}
}
} |
Customize the collector using these documents.Collector customization options:
| Rw ui children |
|---|
Flexible Example
| Code Block |
|---|
{
"global_overrides": {
"debug": false
},
"inputs": {
"sqs_collector": {
"id": "12351",
"enabled": true,
"credentials": {
"aws_access_key_id": "",
"aws_secret_access_key": "",
"aws_base_account_role": "arn:aws:iam::837131528613476382791543:role/devo-xaccount-cs-rolecc",
"aws_cross_account_role": "",
"aws_external_id": ""
},
"ack_messages": true,
"direct_mode": false,
"do_not_send": false,
"compressed_events": false,
"base_url": "https://us-west-1.queue.amazonaws.com/id/name-of-queue",
"region": "us-west-1",
"sqs_visibility_timeout": 240,
"sqs_wait_timeout": 20,
"sqs_max_messages": 1,
"services": {
"custom_service": {
"file_field_definitions": {
"log_type": [
{
"operator": "split",
"on": "/",
"element": 0
},
{
"operator": "replace",
"to_replace": "_",
"replace_with": ""
}
]
},
"filename_filter_rules": [
[
{
"type": "match",
"pattern": "CloudTrail-Digest"
}
],
[
{
"type": "match",
"pattern": "ConfigWritabilityCheckFile"
}
]
],
"encoding": "gzip",
"send_filtered_out_to_unknown": false,
"file_format": {
"type": "line_split_processor",
"config": {
"json": true
}
},
"record_field_mapping": {
"event_simpleName": {
"keys": [
"event_simpleName"
]
}
},
"routing_template": "destination tag",
"line_filter_rules": [
[
{
"source": "record",
"key": "event_simpleName",
"type": "match",
"value": "EndOfProcess"
}
],
[
{
"source": "record",
"key": "event_simpleName",
"type": "match",
"value": "DeliverLocalFXToCloud"
}
]
]
}
}
}
}
} |