AWS VPC Flow Dashboard

Description

This Elastic / Kibana dashboard visualizes the AWS VPC Flow data that can be collected via the AWS VPC Flow Elastic Agent integration as well as via the elastic serverless forwarder (available in SAR).

The target of the dashboard is to provide an complete overview about the VPC Flow logs. It helps to get an understand of how the data is flowing. The screenshot shows a small AWS network setup and how its reflected in the dashboard. In combination with other service specific dashboards it generates a good summary for everything in regards to Network Monitoring.

To get started with Elastic within AWS you can use the Marketplace integration. This includes a cloud formation template that is creating the Elastic as well as the AWS environment for the user.

What are AWS VPC Flow logs?

VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow log data can be published to the following locations: Amazon CloudWatch Logs, Amazon S3, or Amazon Kinesis Data Firehose. After you create a flow log, you can retrieve and view the flow log records in the log group, bucket, or delivery stream that you configured.

Flow logs can help you with a number of tasks, such as:

  • Diagnosing overly restrictive security group rules
  • Monitoring the traffic that is reaching your instance
  • Determining the direction of the traffic to and from the network interfaces

Flow log data is collected outside of the path of your network traffic, and therefore does not affect network throughput or latency. You can create or delete flow logs without any risk of impact to network performance.

More in the AWS docs

Tested versions 8.x
ECS compliant Yes

You must log in to submit a review.

Related downloads

Office display canvas example

Kibana canvas example showing an office screen with weather, news and stock information

Plex ingest node pipeline

A plex ingest node pipeline to parse logs from Plex for Elasticsearch

Threat detection Kibana dashboard

Kibana dashboard example visualizing the results of the Elastic SIEM detection engine

Logstash Meraki Pipeline

Logstash Pipeline to load Meraki logs via Syslog into Elasticsearch

Crawler dashboard

A Kibana dashboard that visualizes the result of the crawler from Elastic Enterprise Search

Terraform Elasticsearch environments

Terraform example scripts to deploy Elastic Cloud Clusters + all necessary components in AWS and GCP

These downloads could be also interesting for you

Elastic Stack Monitoring Dashboard

Kibana dashboards that is showing the monitoring data collected by Elastics in built monitoring capabilities.

Kibana alerting enhancement

This bundle enhances the Kibana alerting experience. Storing all relevant information in indices and visualize the data in dashboards.

Data flow canvas

Average rating:

This canvas examples shows some possibilities of how to visualize data flows. Every flow can be activated / deactivated based on your Elasticsearch data.

Buttons for Kibana dashboards

Link to every content you want within your Kibana dashboards. This example is using links to cloud providers.

AWS VPCFlow Kibana dashboard

Kibana dashboard for AWS VPCFlow log events

Crawler dashboard

A Kibana dashboard that visualizes the result of the crawler from Elastic Enterprise Search