The AWS Lambda integration allows you to monitorAWS Lambda—a serverless compute service.

Use the AWS Lambda integration to collect metrics related to yourLambda functions. Then visualize that data in Kibana, create alerts to notify you if something goes wrong, and reference metrics when troubleshooting an issue.

For example, you could use this integration to track throttled lambda functions, alert the relevant project manager, and then increase your account's concurrency limit.

The AWS Lambda integration collects metrics and logs.

Logs provide detailed information about the execution of AWS Lambda functions.They include invocation events, function output, error messages, stack traces, initialization logs, and AWS-generated reports. These logs help you troubleshoot issues, analyze performance, and monitor the behavior of your Lambda functions during runtime.

Metrics give you insight into the state of AWS Lambda.Metrics collected by the AWS Lambda integration include the number of times your function code is executed, the amount of time that your function code spends processing an event, the number of invocations that result in a function error, and more.

See more details in theMetrics reference.

This integration can also collect Event Source Mapping (ESM) metrics, which track how your Lambda function processes records from event sources like Amazon SQS, DynamoDB, or Kinesis.

To collect these metrics, you must:

1. Enable Event Source Mapping for your Lambda function by following the steps outlined in theAWS documentation.
2. Enable the configuration flagCollect Event Source Mapping metrics.

Important notes:

• Enabling this feature may incur additional costs
• Not all metrics are available for every event source type
• Metric collection may be affected by CloudWatch or Lambda service availability

See more details aboutEvent Source Mapping Metrics.

You need Elasticsearch for storing and searching your data and Kibana for visualizing and managing it.You can use our hosted Elasticsearch Service on Elastic Cloud, which is recommended, or self-manage the Elastic Stack on your own hardware.

Before using any AWS integration you will need:

• AWS Credentials to connect with your AWS account.
• AWS Permissions to make sure the user you're using to connect has permission to share the relevant data.

For more details about these requirements, refer to theAWS integration documentation.

Use this integration if you only need to collect data from the AWS Lambda service.

If you want to collect data from two or more AWS services, consider using theAWS integration.When you configure the AWS integration, you can collect data from as many AWS services as you'd like.

For step-by-step instructions on how to set up an integration, see theGetting started guide.

To enable AWS Lambda logs, ensure that your function's execution role includes the necessary permissions to write to Amazon CloudWatch Logs. Specifically, the role should have the following permissions:

• logs:CreateLogGroup
• logs:CreateLogStream
• logs:PutLogEvents

You can grant these permissions by attaching the AWS managed policyAWSLambdaBasicExecutionRole to your function's execution role.

By default, AWS Lambda automatically streams logs to CloudWatch Logs. You can view these logs by navigating to the AWS Lambda console, selecting your function, and choosing the "Monitor" tab. From there, click on "View CloudWatch logs" to access the logs in the CloudWatch console.

For more detailed information, refer to the AWS documentation onSending Lambda function logs to CloudWatch Logs.

{    "@timestamp": "2025-05-05T03:31:17.000Z",    "agent": {        "ephemeral_id": "b08489ab-f2a0-4ae5-8428-eac8cdf637b8",        "id": "fe56d5ab-2d79-40bf-95d9-2972541e73b2",        "name": "elastic-agent-58953",        "type": "filebeat",        "version": "8.16.6"    },    "aws": {        "lambda": {            "error": {                "message": "Unable to import module 'app': No module named 'aws_lambda_powertools'",                "type": "Runtime.ImportModuleError"            }        }    },    "aws.cloudwatch": {        "ingestion_time": "2025-05-05T03:31:18.000Z",        "log_group": "arn:aws:logs:ap-south-1:XXXXXXXXXXXX:log-group:/aws/lambda/sam-app-powertools-python-HelloWorldFunction-snAkfaCNYJjx",        "log_stream": "2025/05/05/[$LATEST]3486c2ec71334eedba860f992d13b330"    },    "cloud": {        "provider": "aws",        "region": "ap-south-1",        "service": {            "name": "aws_lambda"        }    },    "data_stream": {        "dataset": "aws.lambda_logs",        "namespace": "13365",        "type": "logs"    },    "ecs": {        "version": "8.11.0"    },    "elastic_agent": {        "id": "fe56d5ab-2d79-40bf-95d9-2972541e73b2",        "snapshot": false,        "version": "8.16.6"    },    "event": {        "agent_id_status": "verified",        "dataset": "aws.lambda_logs",        "id": "38946375503894473967458689613264054098903355794226544641",        "ingested": "2025-05-28T15:40:08Z"    },    "input": {        "type": "aws-cloudwatch"    },    "log": {        "file": {            "path": "arn:aws:logs:ap-south-1:XXXXXXXX:log-group:/aws/lambda/sam-app-powertools-python-HelloWorldFunction-snAkfaCNYJjx/2025/05/05/[$LATEST]3486c2ec71334eedba860f992d13b330"        }    },    "tags": [        "forwarded",        "aws-lambda-logs"    ]}

{    "@timestamp": "2022-07-19T22:40:00.000Z",    "agent": {        "ephemeral_id": "ed2abfa1-df5e-4c3e-9c2b-143edcc0e111",        "id": "2d4b09d0-cdb6-445e-ac3f-6415f87b9864",        "name": "docker-fleet-agent",        "type": "metricbeat",        "version": "8.3.2"    },    "aws": {        "cloudwatch": {            "namespace": "AWS/Lambda"        },        "lambda": {            "metrics": {                "ConcurrentExecutions": {                    "avg": 1                },                "Duration": {                    "avg": 130.97                },                "Errors": {                    "avg": 0                },                "Invocations": {                    "avg": 1                },                "Throttles": {                    "avg": 0                },                "UnreservedConcurrentExecutions": {                    "avg": 1                }            }        }    },    "cloud": {        "account": {            "id": "627286350134",            "name": "elastic-observability"        },        "provider": "aws",        "region": "eu-central-1"    },    "data_stream": {        "dataset": "aws.lambda",        "namespace": "default",        "type": "metrics"    },    "ecs": {        "version": "8.11.0"    },    "elastic_agent": {        "id": "2d4b09d0-cdb6-445e-ac3f-6415f87b9864",        "snapshot": false,        "version": "8.3.2"    },    "event": {        "agent_id_status": "verified",        "dataset": "aws.lambda",        "duration": 11364562400,        "ingested": "2022-07-26T22:40:40Z",        "module": "aws"    },    "metricset": {        "name": "cloudwatch",        "period": 300000    },    "service": {        "type": "aws"    }}

ECS Field Reference

Refer to the followingdocument for detailed information on ECS fields.

This integration includes one or more Kibana dashboards that visualizes the data collected by the integration. The screenshots below illustrate how the ingested data is displayed.

←→

×

×