ParseWAF - Amazon CloudWatch Logs

ParseWAF

Use this processor to parse AWS WAF vended logs, extract fields, and and convert them into a JSON format. This processor always processes the entire log event message. For more information about this processor including examples, see parseWAF.

For more information about AWS WAF log format, see Log examples for web ACL traffic.

Important

If you use this processor, it must be the first processor in your transformer.

Contents

source

Omit this parameter and the whole log message will be processed by this processor. No other value than @message is allowed for source.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 128.

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: