- Introduces managed syslog ingestion for CloudWatch Logs, enabling firewalls, routers, switches, and Linux servers to send syslog over TCP, TLS, or UDP to a VPC endpoint without agents.
- Supports RFC 5424, RFC 3164, and Cisco FTD/ASA formats and automatically parses fields such as facility, severity, hostname, and application name for immediate querying.
- Available in all commercial AWS regions except the Middle East (UAE, Bahrain) and Israel (Tel Aviv); documentation provided for setup.