ReleaseBytes
aws AWS What's New ·

CloudWatch Pipelines Adds GeoIP, RDS, and XML Processors

observabilityawsgaengineeraws-rds
feature

Amazon CloudWatch pipelines now include three new processors to parse and enrich log data during ingestion. These additions enable automatic parsing of RDS Aurora audit and error logs, conversion of XML strings within logs to JSON, and enrichment of IP addresses with geographic context. These capabilities help engineers make previously unstructured log data immediately queryable and useful for compliance or security analysis. The processors are available at no additional cost in all AWS Regions where CloudWatch pipelines are generally available.

  • →Amazon RDS log parser
  • →XML parser for log data
  • →GeoIP enrichment processor
Features (3) ›
  • Amazon RDS log parser

    This processor parses Aurora audit and error logs into structured fields, facilitating compliance reporting and easier querying. It addresses the challenge of native engine log formats for RDS Aurora logs.

  • XML parser for log data

    The XML parser converts a field containing an XML string within log data into a JSON format. This allows for easier extraction and analysis of embedded XML payloads from application logs, such as Windows Event Logs.

  • GeoIP enrichment processor

    This processor enriches any IP address field in log data with geographic context, including city, country, and coordinates. It is useful for security analysis by resolving source IPs to their physical locations.

Read the original announcement →

https://aws.amazon.com/about-aws/whats-new/2026/08/cloudwatch-geoip-rds-xml/

Related releases