Graylog2/documentation

Include dependency on DynamoDB in "AWS Kinesis/CloudWatch Input" Docs

sblack4 opened this issue ยท 0 comments

Context

Hi ๐Ÿ‘‹

I've been making heavy use of the CWL -> Kinesis -> Graylog input that you all so lovingly included the plugin for. In creating the input with minimal permissions I kept getting errors that it needed to do the below list of things.

      "cloudwatch:PutMetricData",
      "dynamodb:CreateTable",
      "dynamodb:DescribeTable",
      "dynamodb:GetItem",
      "dynamodb:PutItem",
      "dynamodb:Scan",
      "dynamodb:UpdateItem",

I thought this was strange because I did not know it was doing any of the above but lo and behold once I added the permissions and got the input working it turned out Graylog created a new dynamodb table!

Expected Content

Instructions on creating this table. It seems to be named something like graylog-aws-<STREAM_NAME>. Also the permissions it will need. I'm guessing it will still need to do things to the table. IDK what the cloudwatch:PutMetricData is needed for.

Your Environment

I'm running Graylog in EKS with this chart: https://github.com/KongZ/charts v1.7.7

  • Graylog Version: 4.0.2+1987d10
  • Elasticsearch Version: 6.8.2
  • MongoDB Version: 4.4.1
  • Operating System: Alpine?
  • Browser version: Firfox 82.0.3