Log Types
Lacework alerts only on the events and log entries listed in the table, so those are the only events and log entries that Lacework ingests. This means that any other types of events or entries in the cloud platform logs are ignored and are not displayed on their respective cloud platform log page in the Lacework Console.
Platform Log | Ingested/Processed by Lacework | Ignored by Lacework |
---|---|---|
AWS CloudTrail | Management events | Non-management events |
Azure Activity Log | Activity logs | Resource logs Azure Active Directory logs |
GCP Audit Log | Admin Activity audit logs System Event audit logs | Data Access audit logs |
Amazon EKS | Kubernetes Audit Logs | Kubernetes API Server logs |
GKE | Kubernetes Audit Logs | Kubernetes API Server logs |