ptdavies17 / CloudwatchFH2HEC

Cloudwatch Logs Transform for Firehose: formats into Splunk HEC Event
Other
14 stars 17 forks source link

Why use re-ingestion ? #7

Open matt-mercer opened 2 years ago

matt-mercer commented 2 years ago

Hi .. can I query, what is the thinking behind this function using the batch re-ingestion to return the modified records to the firehose stream ? from this blog, it seems that transformed records can simply be returned from the lambda https://aws.amazon.com/blogs/compute/amazon-kinesis-firehose-data-transformation-with-aws-lambda/

which I've tested and seems to work ..