Skip to main content
Panther Knowledge Base

How do I get my events on separate lines when using AWS Event Bridge with S3 and Panther?

  1. Last updated
  2. Save as PDF

Issue

I am using AWS EventBridge to send data to one of my S3 buckets where Panther ingests from. I noticed that all the data comes in on one line like this:

{ "event": 1 }{ "event": 2 }

How can I have EventBridge transform this such that each event gets its own line?

Resolution

To resolve this issue:

  1. Go into your AWS EventBridge Console
  2. Go to your Rule's target configuration and edit it
  3. Add a literal new line to the Input Template section like below and save it:

Screen Shot 2022-10-14 at 7.10.45 AM.png

 

Cause

AWS Event Bridge transforms your incoming events according to the Input Template. There are many advanced configurations/transformations and you can find more information here: https://docs.aws.amazon.com/eventbri...get-input.html

The key difference in the above screenshot is that we added a new line after the event. This will tell AWS Event Bridge to add a new line between each event it forwards to the target.