AWS Security Blog

Tag: AWS WAF Logs

Figure 1: End-to-end architecture

Analyze AWS WAF logs using HAQM OpenSearch Service anomaly detection built on Random Cut Forests

April 23, 2025: We updated the code, screenshots, and narrative. This blog post shows you how to use the machine learning capabilities of HAQM OpenSearch Service to detect and visualize anomalies in AWS WAF logs. AWS WAF logs are streamed to HAQM OpenSearch Service using HAQM Kinesis Data Firehose. Kinesis Data Firehose invokes an AWS […]