All checks

Medium Elasticsearch · regional

Elasticsearch domain error logging to CloudWatch Logs should be enabled

Verifies that Elasticsearch domains have error logging to CloudWatch Logs enabled.

service: Elasticsearch
severity: Medium
scope: evaluated in every region

How to fix it

To enable error logging to CloudWatch Logs for an Elasticsearch domain, follow these steps:

Open the Amazon Elasticsearch Service console at https://console.aws.amazon.com/es/.
Choose the domain that you want to modify.
In the navigation pane, under Domain configuration, choose Log Publishing Options.
For Error logs, select the Enabled checkbox.
Choose a CloudWatch Logs log group and specify the IAM role to use.
Choose Save changes.

See which of your accounts this check is failing on.

Book a demo