Cribl

Source

Amazon Cloudfront

A fast, worldwide content delivery network (CDN)

Amazon Cloudfront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs worldwide with low latency, high transfer speeds, and a developer-friendly environment.

Read our Solution Brief

How to get data flowing

This integration is facilitated through Cribl Stream’s S3 Source and/or Kinesis Source.

Standard logs (access logs)

  • Enable access logging in Cloudfront.

  • Specify an Amazon S3 bucket for log storage, granting appropriate permissions to write to the bucket.

  • Configure Stream to read data from S3 via Sources > Amazon S3.

  • Supply your SQS queue. IAM roles or manual keys are both supported.

  • Stream will start fetching data as SQS messages become available.

Real-time logs

  • Enable real-time logs in Cloudfront.

  • Configure the desired sampling rate, fields, and path patterns.

  • Specify a Kinesis data stream, by its Amazon Resource Name (ARN).

  • Specify the Kinesis stream’s number of shards and IAM role.

  • Configure Stream to read data from Kinesis via Sources > Amazon Kinesis.

  • Specify the stream name, AWS Region, record data format, authentication details, and optional parameters.

  • Stream will receive data as it becomes available.

View Documentation

Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl’s suite of products to collect, process, route, and analyze all IT and security data, delivering the flexibility, choice, and control required to adapt to their ever-changing needs.

We offer free training, certifications, and a free tier across our products. Our community Slack features Cribl engineers, partners, and customers who can answer your questions as you get started and continue to build and evolve. We also offer a variety of hands-on-Sandboxes for those interested in how companies globally leverage our products for their data challenges.