Applies to: AWS Log Forwarder v1.0.10 and above
AWS Systems Manager gives the visibility and control of the infrastructure on AWS. Systems Manager provides a unified user interface so you can view the operational data from multiple AWS services and allows you to automate operational tasks across your AWS resources. Systems Manager helps you maintain security and compliance by scanning your managed nodes and reporting on any policy violations it detects.
Netsurion monitors events from AWS Systems Manager by parsing the AWS CloudTrail logs and triggers from Amazon EventBridge. Dashboards and reports in Netsurion's threat protection platform, EventTracker, will track the overall actions performed that are related to the AWS Systems Manager service to keep you informed about its activities. It will trigger alerts whenever an action that is critical to the service is carried out.
For a new instance, integrate the AWS instance to EventTracker using the EventTracker integrator lambda function, which will, in turn, deliver the logs to EventTracker from AWS.
Once configured to deliver events to EventTracker Manager, the alerts, dashboards, and reports can be configured into EventTracker.
For an already-integrated AWS instance, kindly update to ETS_AWS_LogForwarder v1.0.10 or above.
Reports
The configuration details are consistent with EventTracker version 9.3X and later, and ETS-AWS-LogForwarder v1.0.10 and above.
To configure AWS Systems Manager to send logs to EventTracker, refer to the How-to Guide.
For more information please refer to the Integration Guide.