Skip to content

[CLOUDS-7750] feat(docs): update AWS kinesis log documentation#35959

Open
RaphaelAllier wants to merge 1 commit intomasterfrom
raphael.allier/CLOUDS-7750-follow-up-doc-update
Open

[CLOUDS-7750] feat(docs): update AWS kinesis log documentation#35959
RaphaelAllier wants to merge 1 commit intomasterfrom
raphael.allier/CLOUDS-7750-follow-up-doc-update

Conversation

@RaphaelAllier
Copy link
Copy Markdown
Member

@RaphaelAllier RaphaelAllier commented Apr 14, 2026

What does this PR do? What is the motivation?

Following https://datadoghq.atlassian.net/browse/CLOUDS-7750 I'm updating the docs on logs from Kinesis so customers have better expectations with regards to how the logs are parsed on the Datadog side

Merge instructions

N/A

Merge readiness:

  • Ready for merge

AI assistance

Wrote the docs with a Claude prompt and did some iterations

@RaphaelAllier RaphaelAllier requested a review from a team as a code owner April 14, 2026 09:48
@github-actions github-actions bot added the Guide Content impacting a guide label Apr 14, 2026
@github-actions
Copy link
Copy Markdown
Contributor


When logs arrive through Amazon Data Firehose, Datadog automatically determines the `source`, `service`, and tags for each log based on AWS metadata:

1. **Source**: Detected from the CloudWatch Log Group name. For example, `/aws/lambda/my-function` sets `source:lambda`, `/aws/rds/...` sets `source:rds`. If the log group does not match a known AWS service pattern, the log group name itself is used as the source.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
1. **Source**: Detected from the CloudWatch Log Group name. For example, `/aws/lambda/my-function` sets `source:lambda`, `/aws/rds/...` sets `source:rds`. If the log group does not match a known AWS service pattern, the log group name itself is used as the source.
1. **Source**: Detected from the CloudWatch log group name. For example, `/aws/lambda/my-function` sets `source:lambda`, and `/aws/rds/...` sets `source:rds`. If the log group does not match a known AWS service pattern, the log group name itself is used as the source.


There are two ways to override these auto-detected values:

#### Firehose Common Attributes
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
#### Firehose Common Attributes
#### Firehose common attributes


These fields are consumed during intake and do not appear as log attributes.

<div class="alert alert-info">This behavior is not enabled by default. To enable it for your organization, <a href="/help/">contact Datadog Support</a>.</div>
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you specifically describe the behavior that is not enabled by default? I lack context here, but it's not clear to me what feature I need to turn on.

Also, this information might be important for the user to know at the beginning of the section. Perhaps instead of this note, you could add a sentence at the beginning: " is turned off by default. To enable for your organization, contact Datadog Support."


**Note**: A single Kinesis payload must not be more than 65,000 log messages. Log messages after that limit are dropped.

## How source, service, and tags are set
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
## How source, service, and tags are set
## Set the source, service, and tags

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Guide Content impacting a guide

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants