AWS VPC Flow Logs & AWS nlb logs are not coming in WAZUH UI
10 views
Skip to first unread message
Suvadip Ghosh
unread,
6:13 AM (14 hours ago) 6:13 AM
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Wazuh | Mailing List
Dear Team,
While integrating AWS services like AWS nlb & AWS VPC I am facing some issue with the log parsing.
For AWS VPC there is a parsing error: 2026/03/04 06:18:47 wazuh-modulesd:aws-s3: INFO: Executing Bucket Analysis: (Bucket: ikxxxxx-vpc-flow-log-xxxxf0, Type: vpcflow) 2026/03/04 06:18:49 wazuh-modulesd:aws-s3: WARNING: Bucket: - Returned exit code 9 2026/03/04 06:18:49 wazuh-modulesd:aws-s3: WARNING: Bucket: - Failed to parse file AWSLogs/xxxxxxxxxx265/vpcflowlogs/ap-south-1/2026/03/04/xxxxxxxxx265_vpcflowlogs_ap-south-1_fl-0210ecfc6db3503a6_20260304T0000Z_504eb0f8.log.gz: ValueError("invalid literal for int() with base 10: 'type'")
AWS nlb: Everything is working fine for aws nlb, no error in the wazuh server but logs are not coming in the UI.(kindly check the attached screenshot).
Let me know what changes are required to oversome this issue.