cloud.aws.configlogs
Introduction
The tags beginning with cloud.aws.configlogs
identify events generated by AWS Config.
Valid tags and data tablesÂ
The full tag must have 4 levels. The first 3 are fixed as cloud.aws.configlogs
. The fourth level indicates the event subtype.
These are the valid tags and corresponding data tables that will receive the parsers' data:
Product / Service | Tags | Data tables |
---|---|---|
AWS Config |
|
|
For more information, read more About Devo tags.
Table structure
These are the fields displayed in this table:
Field | Type | Field transformation | Source field name | Extra fields |
---|---|---|---|---|
eventdate |
| Â | Â | Â |
fileVersion |
| Â | Â | Â |
configurationItems_str |
| stringify(json(configurationItems)) | configurationItems | Â |
configurationItemDiff_changedProperties_Relationships0_previousValue_resourceId |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships0_previousValue_resourceType |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships0_previousValue_name |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships0_updatedValue_resourceId |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships0_updatedValue_resourceType |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships0_updatedValue_name |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships0_changeType |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships1_previousValue_resourceId |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships1_previousValue_resourceType |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships1_previousValue_name |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships1_updatedValue_resourceId |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships1_updatedValue_resourceType |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships1_updatedValue_name |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships1_changeType |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships2_previousValue_resourceId |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships2_previousValue_resourceType |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships2_previousValue_name |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships2_updatedValue_resourceId |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships2_updatedValue_resourceType |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships2_updatedValue_name |
| Â | Â | Â |
configurationItemDiff_changedProperties_Relationships2_changeType |
| Â | Â | Â |
configurationItemDiff_changeType |
| Â | Â | Â |
configurationItem_relatedEvents |
| Â | Â | Â |
configurationItem_relationships_resourceId_str |
| replace(replace(stringify(json(configurationItem_relationships_resourceId)), "[", ""), "]", "") | configurationItem_relationships_resourceId | Â |
configurationItem_relationships_resourceName_str |
| replace(replace(stringify(json(configurationItem_relationships_resourceName)), "[", ""), "]", "") | configurationItem_relationships_resourceName | Â |
configurationItem_relationships_resourceType_str |
| configurationItem_relationships_resourceType | Â | |
configurationItem_relationships_name_str |
| configurationItem_relationships_name | Â | |
configurationItem_configuration_description |
| Â | Â | Â |
configurationItem_configuration_groupName |
| Â | Â | Â |
configurationItem_configuration_ipPermissions_ipProtocol_str |
| configurationItem_configuration_ipPermissions_ipProtocol | Â | |
configurationItem_configuration_ipPermissions_ipv6Ranges_str |
| configurationItem_configuration_ipPermissions_ipv6Ranges | Â | |
configurationItem_configuration_ipPermissions_prefixListIds_str |
| configurationItem_configuration_ipPermissions_prefixListIds | Â | |
configurationItem_configuration_ipPermissions_userIdGroupPairs_str |
| configurationItem_configuration_ipPermissions_userIdGroupPairs | Â | |
configurationItem_configuration_ipPermissions_ipv4Ranges_str |
| configurationItem_configuration_ipPermissions_ipv4Ranges | Â | |
configurationItem_configuration_ipPermissions_ipRanges_str |
| configurationItem_configuration_ipPermissions_ipRanges | Â | |
configurationItem_configuration_ownerId |
| Â | Â | Â |
configurationItem_configuration_groupId |
| Â | Â | Â |
configurationItem_configuration_ipPermissionsEgress_ipProtocol_str |
| configurationItem_configuration_ipPermissionsEgress_ipProtocol | Â | |
configurationItem_configuration_ipPermissionsEgress_ipv6Ranges_str |
| configurationItem_configuration_ipPermissionsEgress_ipv6Ranges | Â | |
configurationItem_configuration_ipPermissionsEgress_prefixListIds_str |
| configurationItem_configuration_ipPermissionsEgress_prefixListIds | Â | |
configurationItem_configuration_ipPermissionsEgress_userIdGroupPairs_str |
| configurationItem_configuration_ipPermissionsEgress_userIdGroupPairs | Â | |
configurationItem_configuration_ipPermissionsEgress_ipv4Ranges_str |
| configurationItem_configuration_ipPermissionsEgress_ipv4Ranges | Â | |
configurationItem_configuration_ipPermissionsEgress_ipRanges_str |
| configurationItem_configuration_ipPermissionsEgress_ipRanges | Â | |
configurationItem_configuration_tags |
| Â | Â | Â |
configurationItem_configuration_vpcId |
| Â | Â | Â |
configurationItem_supplementaryConfiguration |
| Â | Â | Â |
configurationItem_supplementaryConfiguration__EnableTerminationProtection |
| Â | Â | Â |
configurationItem_supplementaryConfiguration_StackResourceSummaries_updateReplacePolicy_str |
| configurationItem_supplementaryConfiguration_StackResourceSummaries_updateReplacePolicy | Â | |
configurationItem_supplementaryConfiguration_StackResourceSummaries_deletionPolicy_str |
| configurationItem_supplementaryConfiguration_StackResourceSummaries_deletionPolicy | Â | |
configurationItem_supplementaryConfiguration_StackResourceSummaries_logicalResourceId_str |
| configurationItem_supplementaryConfiguration_StackResourceSummaries_logicalResourceId | Â | |
configurationItem_supplementaryConfiguration_StackResourceSummaries_physicalResourceId_str |
| configurationItem_supplementaryConfiguration_StackResourceSummaries_physicalResourceId | Â | |
configurationItem_supplementaryConfiguration_StackResourceSummaries_resourceType_str |
| configurationItem_supplementaryConfiguration_StackResourceSummaries_resourceType | Â | |
configurationItem_supplementaryConfiguration_StackResourceSummaries_lastUpdatedTimestamp_str |
| configurationItem_supplementaryConfiguration_StackResourceSummaries_lastUpdatedTimestamp | Â | |
configurationItem_supplementaryConfiguration_StackResourceSummaries_resourceStatus_str |
| configurationItem_supplementaryConfiguration_StackResourceSummaries_resourceStatus | Â | |
configurationItem_supplementaryConfiguration_StackResourceSummaries_driftInformation_stackResourceDriftStatus_str |
| configurationItem_supplementaryConfiguration_StackResourceSummaries_driftInformation_stackResourceDriftStatus | Â | |
supplementaryConfiguration_unsupportedResources |
| Â | Â | Â |
configurationItem_tags |
| Â | Â | Â |
configurationItem_configurationItemVersion |
| Â | Â | Â |
configurationItem_configurationItemCaptureTime |
| Â | Â | Â |
configurationItem_configurationStateId |
| Â | Â | Â |
configurationItem_awsAccountId |
| Â | Â | Â |
configurationItem_configurationItemStatus |
| Â | Â | Â |
configurationItem_resourceType |
| Â | Â | Â |
configurationItem_resourceId |
| Â | Â | Â |
configurationItem_resourceName |
| Â | Â | Â |
configurationItem_ARN |
| Â | Â | Â |
configurationItem_awsRegion |
| Â | Â | Â |
configurationItem_availabilityZone |
| Â | Â | Â |
configurationItem_configurationStateMd5Hash |
| Â | Â | Â |
configurationItem_resourceCreationTime |
| Â | Â | Â |
configurationItem_fileVersion |
| Â | Â | Â |
configurationItem_configSnapshotId |
| Â | Â | Â |
configurationItem_eventTimestamp |
| Â | Â | Â |
configurationItem_configuration_stackId |
| Â | Â | Â |
configurationItem_configuration_stackName |
| Â | Â | Â |
configurationItem_configuration_creationTime |
| configurationItem_configuration_creationTime_tmp | Â | |
configurationItem_configuration_lastUpdatedTime |
| Â | Â | Â |
configurationItem_configuration_stackStatus |
| Â | Â | Â |
configurationItem_configuration_disableRollback |
| Â | Â | Â |
configurationItem_configuration_notificationARNs_str |
| configurationItem_configuration_notificationARNs | Â | |
configurationItem_configuration_capabilities_str |
| configurationItem_configuration_capabilities | Â | |
configurationItem_configuration_outputs_str |
| configurationItem_configuration_outputs | Â | |
configurationItem_configuration_driftInformation_stackDriftStatus |
| Â | Â | Â |
notificationCreationTime |
| Â | Â | Â |
messageType |
| Â | Â | Â |
recordVersion |
| Â | Â | Â |
`timestamp` |
| Â | configurationItem_configurationItemCaptureTime | Â |
ACCID |
| Â | Â | Â |
REGION |
| Â | Â | Â |
hostchain |
|  |  | ✓ |
tag |
|  |  | ✓ |
rawMessage |
|  |  | ✓ |