Amazon CloudWatch Agent adds support for Windows Event Log Filters

Amazon CloudWatch Agent Updates

Amazon CloudWatch agent now supports configurable Windows Event log filters, allowing selective collection and sending of system and application events to CloudWatch from Windows hosts on Amazon EC2 or on-premises.

You can define filter criteria for each Windows Event log stream in the agent configuration file, including event levels, event IDs, and regular expressions to either include or exclude text within events. This helps manage log ingestion by processing only necessary events.

What to do

• Create or edit the CloudWatch Agent Configuration File to define your filter criteria.
• Ensure your CloudWatch Agent is updated to the latest version.
• Verify the configuration to ensure only relevant events are sent to CloudWatch.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.