Cistern is an event aggregation and indexing system. Cistern consumes VPC Flow Logs and JSON events from AWS CloudWatch Logs and exposes a SQL-like querying interface.

experimental Join the chat at https://gitter.im/Preetam/cistern

• CloudWatch Logs
  • VPC Flow Logs
  • JSON CloudWatch Logs events

Coming soon:

• sFlow v5

The official documentation is available on the Cistern website.

MIT (see LICENSE)