Manage Calico Cloud logs

📄️Overview

Calico Cloud uses managed Elasticsearch for flow, DNS, audit, BGP, and L7 logs with workload context, RBAC, and archival to external SIEMs.

📄️Archive logs

Forward Calico Cloud flow, DNS, audit, and L7 logs to Syslog, Splunk, or Amazon S3 to retain compliance data beyond managed retention windows.

📄️Log aggregation

Understand how Calico Cloud aggregates log entries by selecting which fields participate in the aggregation key.

🗃Flow logs

6 items

📄️Audit logs

Calico Cloud audit logs record changes to network policies, tiers, network sets, host endpoints, and other resources across connected clusters.

🗃DNS logs

2 items

📄️BGP logs

Reference of key/value fields in Calico Cloud BGP activity logs in Elasticsearch, with sample queries for IPv4, IPv6, and per-node lookups.

🗃L7 logs

5 items