ParseWAF - Amazon CloudWatch Logs
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

ParseWAF

Use this processor to parse Amazon WAF vended logs, extract fields, and and convert them into a JSON format. This processor always processes the entire log event message. For more information about this processor including examples, see parseWAF.

For more information about Amazon WAF log format, see Log examples for web ACL traffic.

Important

If you use this processor, it must be the first processor in your transformer.

Contents

source

Omit this parameter and the whole log message will be processed by this processor. No other value than @message is allowed for source.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 128.

Required: No

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: