All checks

Medium Opensearch · regional

OpenSearch domain error logging to CloudWatch Logs should be enabled

Verifies that OpenSearch domains have error logging to CloudWatch Logs enabled.

service: Opensearch
severity: Medium
scope: evaluated in every region

How to fix it

To enable error logging to CloudWatch Logs for an OpenSearch domain, follow these steps:

Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
Choose the domain that you want to modify.
In the navigation pane, under Cluster configuration, choose Log Publishing Options.
For Error logs, select Enable to CloudWatch Logs.
Choose Save changes.

See which of your accounts this check is failing on.

Book a demo