QuestionQ233

Data Ingestion and Transformation

A company operates multiple applications on AWS. It has configured every application to produce logs. The company needs to query and visualize the application logs in near real time.

Which solution meets these requirements?

  • A Configure the applications to output logs to Amazon CloudWatch Logs log groups. Create an Amazon S3 bucket. Create an AWS Lambda function that runs on a schedule to export the required log groups to the S3 bucket. Use Amazon Athena to query the log data in the S3 bucket.
  • B Create an Amazon OpenSearch Service domain. Configure the applications to output logs to Amazon CloudWatch Logs log groups. Create an OpenSearch Service subscription filter for each log group to stream the data to OpenSearch. Create the required queries and dashboards in OpenSearch Service to analyze and visualize the data.
  • C Configure the applications to output logs to Amazon CloudWatch Logs log groups. Use CloudWatch log anomaly detection to query and visualize the log data.
  • D Update the application code to send the log data to Amazon QuickSight by using Super-fast, Parallel, In-memory Calculation Engine (SPICE). Create the required analyses and dashboards in QuickSight.
Explanation

Amazon CloudWatch Logs subscription filters can stream incoming log events to an Amazon OpenSearch Service domain in near real time. OpenSearch Service can index those logs and provide queries and dashboards for log analysis and visualization.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!