Enabling AWS Logs

In order to send the logs from SonicOS to Amazon CloudWatch Logs, you must first create a Log Group and a Log Stream in AWS.

If you already have an Identity Access Management (IAM) user account with the appropriate permissions to access CloudWatch Logs from the AWS Console:

1. Navigate to the CloudWatch section.
2. Select the Logs item in the left navigation menu. Ensure that you have selected the appropriate AWS Region for the logs to be stored. As with many AWS services, CloudWatch Logs is region-specific.
3. Create the Log Group.
4. Create the Log Stream.

To enable AWS logs in SonicOS

1. Navigate to the Device > Log > AWS page.
2. In the CloudWatch Logs section, select Enable Logging.
3. Select the Region in which you created a Log Group and Log Stream in the AWS Console. (You can change the region used by the firewall either on this page or on the Network > System > AWS Configuration page.)
4. Enter the names of the Log Group and Log Stream that you created in the AWS Console that holds the logs sent to AWS CloudWatch Logs.
5. The logs are sent at the specified Synchronization Interval. Change the value of the interval (in seconds) to suit your needs.
6. Optionally, you can click Force Sync to manually synchronize with your AWS Console settings.
7. Click Accept.