AWS VPC Flow Logs & AWS nlb logs are not coming in WAZUH UI

10 views
Skip to first unread message

Suvadip Ghosh

unread,
6:13 AM (14 hours ago) 6:13 AM
to Wazuh | Mailing List
Dear Team,

While integrating AWS services like AWS nlb & AWS VPC I am facing some issue with the log parsing.

For AWS VPC there is a parsing error: 2026/03/04 06:18:47 wazuh-modulesd:aws-s3: INFO: Executing Bucket Analysis: (Bucket: ikxxxxx-vpc-flow-log-xxxxf0, Type: vpcflow)
2026/03/04 06:18:49 wazuh-modulesd:aws-s3: WARNING: Bucket:  -  Returned exit code 9
2026/03/04 06:18:49 wazuh-modulesd:aws-s3: WARNING: Bucket:  -  Failed to parse file AWSLogs/xxxxxxxxxx265/vpcflowlogs/ap-south-1/2026/03/04/xxxxxxxxx265_vpcflowlogs_ap-south-1_fl-0210ecfc6db3503a6_20260304T0000Z_504eb0f8.log.gz: ValueError("invalid literal for int() with base 10: 'type'")

AWS nlb: Everything is working fine for aws nlb, no error in the wazuh server but logs are not coming in the UI.(kindly check the attached screenshot).

Let me know what changes are required to oversome this issue.

Screenshot 2026-03-04 120730.png
Reply all
Reply to author
Forward
0 new messages