Overview

AWS WAF captures AWS WAF logs from CloudWatch, S3, or Firehose.

What this pack does:

• Extracts metrics by action and terminating rule
• Optionally, drops and samples ALLOW logs
• Drops unused fields, null fields, and redacts credentials

Further Reading