Skip to content

Add Cloud Forwarder onboarding tile to O11y Solution#250325

Merged
strawgate merged 17 commits intoelastic:mainfrom
strawgate:cursor/cloudforwarder-add-data-1095
Jan 29, 2026
Merged

Add Cloud Forwarder onboarding tile to O11y Solution#250325
strawgate merged 17 commits intoelastic:mainfrom
strawgate:cursor/cloudforwarder-add-data-1095

Conversation

@strawgate
Copy link
Copy Markdown
Contributor

@strawgate strawgate commented Jan 25, 2026

What this PR does

Adds EDOT Cloud Forwarder onboarding tile for AWS S3 log forwarding via Lambda.

🧪 Manual test checklist:

  • Tile appears under Cloud → AWS
  • CloudFormation URL includes correct parameters
  • Error state shows correctly (tested with not enough permissions)
  • Data shows up after following workflow steps
  • Feedback buttons work

⚙️ Manual test process:

  1. Create an S3 bucket with a super creative name like bieaston-edot-cf-vpcflow-test. You do not need to do anything other than a standard general purpose s3 bucket.
  2. Navigate to Add Data > Cloud > AWS
  3. Provide the bucket name in the S3 Bucket input in the onboarding wizard
  4. Deploy Cloud Forwarder
  5. Upload a file with VPC Flow Logs to the bucket. Here are some sample logs for testing with:
    627286350134_vpcflowlogs_us-east-1_fl-0e9aa66928bf09e41_20260109T0000Z_37f33f11.log.gz
  6. Find VPC Flow Logs in Discover by changing the time range to a year and adding a filter for data_stream.dataset : "aws.vpcflow.otel"
cloud-forwarder-onboarding.mov

Release note

A quick start for EDOT Cloud Forwarder is now available in the Observability data onboarding experience for easy onboarding of VPC Flow, ELB Access, and Cloudtrail logs from an AWS S3 bucket. See https://www.elastic.co/docs/reference/opentelemetry/edot-cloud-forwarder for more information about EDOT Cloud Forwarder.

@strawgate strawgate requested a review from a team as a code owner January 25, 2026 16:04
@cla-checker-service
Copy link
Copy Markdown

cla-checker-service bot commented Jan 25, 2026

💚 CLA has been signed

@strawgate strawgate force-pushed the cursor/cloudforwarder-add-data-1095 branch from fecf650 to 293e519 Compare January 25, 2026 16:05
@strawgate strawgate added the ci:project-deploy-observability Create an Observability project label Jan 25, 2026
@github-actions
Copy link
Copy Markdown
Contributor

🤖 GitHub comments

Expand to view the GitHub comments

Just comment with:

  • /oblt-deploy : Deploy a Kibana instance using the Observability test environments.
  • run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)

- Add CloudForwarder page component with custom header
- Create CloudForwarderPanel with Launch Stack button for AWS
- Add route for /cloudforwarder in observability_onboarding_flow
- Add CloudForwarder custom card to use_custom_cards
- Include CloudForwarder in cloud category featured cards
- Card visible only on Cloud deployments (like Firehose)

The CloudForwarder enables users to deploy the Elastic Distribution
of OpenTelemetry Cloud Forwarder to forward AWS CloudWatch logs
to Elastic using OpenTelemetry.

Co-authored-by: bill.easton <bill.easton@elastic.co>
@strawgate strawgate force-pushed the cursor/cloudforwarder-add-data-1095 branch from c2f47fa to 6ee112d Compare January 25, 2026 16:52
@strawgate strawgate changed the title [Draft] Add Cloud Forwarder onboarding tile to O11y Solution Add Cloud Forwarder onboarding tile to O11y Solution Jan 25, 2026
@gbamparop gbamparop added the backport:skip This PR does not require backporting label Jan 26, 2026
@strawgate
Copy link
Copy Markdown
Contributor Author

I believe we can push the API Key into the template so im going to make another revision of this that further simpifies the onboarding

@rStelmach rStelmach self-assigned this Jan 28, 2026
Copy link
Copy Markdown
Contributor

@rStelmach rStelmach left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested on serverless. Everything works as expected 🚀

LGTM!!

left one question

@strawgate strawgate enabled auto-merge (squash) January 29, 2026 20:35
@elasticmachine
Copy link
Copy Markdown
Contributor

elasticmachine commented Jan 29, 2026

💚 Build Succeeded

  • Buildkite Build
  • Commit: d608963
  • Kibana Serverless Image: docker.elastic.co/kibana-ci/kibana-serverless:pr-250325-d60896389dfc

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id before after diff
observabilityOnboarding 117 122 +5

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
observabilityOnboarding 127.5KB 137.2KB +9.7KB

Page load bundle

Size of the bundles that are downloaded on every page load. Target size is below 100kb

id before after diff
observabilityOnboarding 11.5KB 11.9KB +457.0B
Unknown metric groups

ESLint disabled line counts

id before after diff
observabilityOnboarding 6 10 +4

Total ESLint disabled count

id before after diff
observabilityOnboarding 9 13 +4

History

cc @rStelmach

@strawgate strawgate merged commit cce104e into elastic:main Jan 29, 2026
16 checks passed
mbondyra added a commit to mbondyra/kibana that referenced this pull request Jan 30, 2026
…iew_cps

* commit '5f7fec57cb01883038810bd735a0666683b49904': (116 commits)
  [Security Solution][Attacks/Alerts][Setup and miscellaneous] Advanced setting to control feature visibility (elastic#250157) (elastic#250830)
  Fix synthtrace `fetch` usage (elastic#250950)
  [APM] Add Nodes and Edges components and selection logic (elastic#250937)
  [Docs] Update alerting-settings.md and add serverless value for one parameter (elastic#250842)
  [Agent Builder] filestore: initial implementation (elastic#250043)
  [CPS] Support CPS in Vega ESQL (elastic#250693)
  Adjustments to cascade document esql helpers (elastic#250560)
  [Security Solutions] Trial Companion - adds ai chat and elastic agent detectors (elastic#250908)
  [Obs Presentation] Code Scanning Alert Fixes (elastic#250858)
  [performance] add return and refresh render scenarios to dashboard journeys (elastic#250939)
  skip failing test suite (elastic#245458)
  Add Cloud Forwarder onboarding tile to O11y Solution (elastic#250325)
  [Traces] Remove APM unified trace waterall embeddable registration (elastic#250808)
  [Discover] [Metrics] Fix: metrics grid titles do not update on order change (elastic#250963)
  [a11y] Fix Eui modal title annoucment (elastic#250459)
  [Cloud Security] [Fleet] Add cloud connector access scope for input or package level credential definitions (elastic#250280)
  [WorkplaceAI] SharePoint Online stack connector (elastic#248737)
  [Response Ops][Task Manager] Update functions do not handle API key invalidation (elastic#249109)
  [Osquery] Remove @kbn/timelines-plugin dependency from osquery plugin (elastic#250055)
  [One Discover][Logs UX] Update OpenTelemetry Semantic Conventions (elastic#250346)
  ...
hannahbrooks pushed a commit to hannahbrooks/kibana that referenced this pull request Jan 30, 2026
Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:skip This PR does not require backporting ci:project-deploy-observability Create an Observability project release_note:enhancement v9.4.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants