From 09c45f2eea222d1ca8692f0d0ebd410d17775a7c Mon Sep 17 00:00:00 2001 From: Kevin Huang Date: Wed, 27 Mar 2024 11:19:01 -0400 Subject: [PATCH] Adding cloudtrail insight to the cloudtrail regex pattern Adding Cloudtrail-Insight to the regex pattern so that Cloudtrail-Insight logs are marked with source of cloudtrail instead of default s3. --- aws/logs_monitoring/steps/common.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/aws/logs_monitoring/steps/common.py b/aws/logs_monitoring/steps/common.py index a6fc24e18..3d70a2364 100644 --- a/aws/logs_monitoring/steps/common.py +++ b/aws/logs_monitoring/steps/common.py @@ -9,7 +9,7 @@ from settings import DD_CUSTOM_TAGS, DD_SERVICE, DD_SOURCE CLOUDTRAIL_REGEX = re.compile( - "\d+_CloudTrail(|-Digest)_\w{2}(|-gov|-cn)-\w{4,9}-\d_(|.+)\d{8}T\d{4,6}Z(|.+).json.gz$", + "\d+_CloudTrail(|-Digest|-Insight)_\w{2}(|-gov|-cn)-\w{4,9}-\d_(|.+)\d{8}T\d{4,6}Z(|.+).json.gz$", re.I, )