Issue

I am using AWS EventBridge to send data to one of my S3 buckets where Panther ingests from. I noticed that all the data comes in on one line like this:

{ "event": 1 }{ "event": 2 }

How can I have EventBridge transform this such that each event gets its own line?

Resolution

To resolve this issue:

1. Go into your AWS EventBridge Console

2. Go to your Rule's target configuration and edit it

3. Add a literal new line to the Input Template section like below and save it:

Cause

AWS Event Bridge transforms your incoming events according to the Input Template. There are many advanced configurations/transformations and you can find more information here: https://docs.aws.amazon.com/eventbri...get-input.html

The key difference in the above screenshot is that we added a new line after the event. This will tell AWS Event Bridge to add a new line between each event it forwards to the target.