splunk

The generic Windows audit log config lacks many event ids, e.g.

• registry events
• driver load service addition events, System/7045 and Security/4697
• likely others

Hey,

I see awesome MySQL preset but at case in my company there are still missing some features. We need three things:

• Run in root mode.
• Don't choose database at start because we have multiple db's in single MySQL instance.
• Mount Docker volumes. We use internal cache for seeds and it's saved in Docker volume.

Here's a quick sneak peek what I'm talking about in code:
https://g

<

What would you like to be added:

We need to make a PR to this repo https://github.com/aws-samples/amazon-ecs-firelens-examples to be listed with examples for customers

Why is this needed:

ease of use to get started when customers try firelens

In many environments there is a cost to network traffic used. Allowing compression of the HTTP post to the HEC endpoint could greatly reduce these costs and transport time.