Custom log ingestion

[ongyo-sensei]

Hello,

What would be best way to import custom audit logs (ont supported/managed) to Matano?

From what I understand I need to pull data in custom S3 bucket on my own and then normalize to Elastic Common Schema and and then use Log configuration to ingest it as described here in documentation.

Is that roughly the process?

I just need to understand the process.

Thank you!

[Samrose-Ahmed]

Yes thats the process, put the raw logs into S3, define your schema, and transformation script in a custom log source and consume your data from the data lake.

[ongyo-sensei]

Thank you!