OpenSearch domains should have Error Logging enabled

opensearch
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

This check determines if the ES_APPLICATION_LOGS feature is enabled for Amazon OpenSearch Service domains, and is configured to send logs to Amazon CloudWatch Logs. Application logs provide valuable insights into the operational aspects and health of your OpenSearch clusters and allow you to monitor query performance, identify potential issues, and track user activity.

Remediation

To enable ES_APPLICATION_LOGS for an Amazon OpenSearch Service domain, refer to the Configuring Amazon OpenSearch Service to Send Logs to Amazon CloudWatch Logs section of the Amazon OpenSearch Service Developer Guide.