OpenSearch domains should have Error Logging enabled

Documentos > Datadog Security > OOTB Rules > OpenSearch domains should have Error Logging enabled

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

This check determines if the ES_APPLICATION_LOGS feature is enabled for Amazon OpenSearch Service domains, and is configured to send logs to Amazon CloudWatch Logs. Application logs provide valuable insights into the operational aspects and health of your OpenSearch clusters and allow you to monitor query performance, identify potential issues, and track user activity.

Remediation

To enable ES_APPLICATION_LOGS for an Amazon OpenSearch Service domain, refer to the Configuring Amazon OpenSearch Service to Send Logs to Amazon CloudWatch Logs section of the Amazon OpenSearch Service Developer Guide.