DinisCruz · February 22, 2025 18:56
diff --git a/1. Whitepaper-AWS_Lambda@Edge_Logging_to_OpenObserve.md b/1. Whitepaper-AWS_Lambda@Edge_Logging_to_OpenObserve.md
diff --git a/2. lambda_function.py b/2. lambda_function.py
 import json
 import base64
 import urllib3
 import datetime
 import logging

 # OpenObserve configuration
 CONFIG = {
    "host": "api.openobserve.ai",       # NOTE: this should NOT be done here (use AWS Secrets at AWS env vars to provide these) 
    "organization": "....",
    "stream": "default",
    "auth": "..."
 }

 # Create HTTP pool manager
 http = urllib3.PoolManager()

 # Configure logging
 logger = logging.getLogger()
 logger.setLevel(logging.INFO)

 def lambda_handler(event, context):
    logger.info("Lambda@Edge Origin Response Triggered")

    try:
        # Extract CloudFront request and response
        request = event['Records'][0]['cf']['request']
        response = event['Records'][0]['cf']['response']

        # Create log entry
        log_entry = {
            "timestamp": datetime.datetime.utcnow().isoformat() + "Z",
            "client_ip": request.get("clientIp", "-"),
            "uri": request.get("uri", "-"),
            "method": request.get("method", "-"),
            "status_code": int(response.get("status", 0)),
            "user_agent": request["headers"].get("user-agent", [{"value": "-"}])[0]["value"],
            "edge_location": request["headers"].get("host", [{"value": "-"}])[0]["value"],
            "referer": request["headers"].get("referer", [{"value": "-"}])[0]["value"],
            "edge_response_result_type": "Hit" if 200 <= int(response.get("status", 0)) < 300 else "Miss"
        }

        # Send log entry to OpenObserve
        send_to_openobserve([log_entry])

    except Exception as e:
        logger.error(f"Error processing request: {str(e)}")

    # Return the original response unchanged
    return response

 def send_to_openobserve(logs):
    """Sends logs to OpenObserve via HTTP request"""
    try:
        url = f"https://{CONFIG['host']}/api/{CONFIG['organization']}/{CONFIG['stream']}/_json"
        headers = {
            "Content-Type": "application/json",
            "Authorization": "Basic " + base64.b64encode(CONFIG["auth"].encode()).decode()
        }

        # Convert logs to JSON
        json_data = json.dumps(logs)

        # Make the HTTP request
        response = http.request("POST", url, body=json_data, headers=headers)

        # Handle HTTP response status
        if response.status < 200 or response.status >= 300:
            logger.error(f"OpenObserve returned status code {response.status}")
        else:
            logger.info("Successfully sent logs to OpenObserve")

    except Exception as e:
        logger.error(f"Error sending logs to OpenObserve: {str(e)}")
	import json
	import base64
	import urllib3
	import datetime
	import logging

	# OpenObserve configuration
	CONFIG = {
	"host": "api.openobserve.ai", # NOTE: this should NOT be done here (use AWS Secrets at AWS env vars to provide these)
	"organization": "....",
	"stream": "default",
	"auth": "..."
	}

	# Create HTTP pool manager
	http = urllib3.PoolManager()

	# Configure logging
	logger = logging.getLogger()
	logger.setLevel(logging.INFO)

	def lambda_handler(event, context):
	logger.info("Lambda@Edge Origin Response Triggered")

	try:
	# Extract CloudFront request and response
	request = event['Records'][0]['cf']['request']
	response = event['Records'][0]['cf']['response']

	# Create log entry
	log_entry = {
	"timestamp": datetime.datetime.utcnow().isoformat() + "Z",
	"client_ip": request.get("clientIp", "-"),
	"uri": request.get("uri", "-"),
	"method": request.get("method", "-"),
	"status_code": int(response.get("status", 0)),
	"user_agent": request["headers"].get("user-agent", [{"value": "-"}])[0]["value"],
	"edge_location": request["headers"].get("host", [{"value": "-"}])[0]["value"],
	"referer": request["headers"].get("referer", [{"value": "-"}])[0]["value"],
	"edge_response_result_type": "Hit" if 200 <= int(response.get("status", 0)) < 300 else "Miss"
	}

	# Send log entry to OpenObserve
	send_to_openobserve([log_entry])

	except Exception as e:
	logger.error(f"Error processing request: {str(e)}")

	# Return the original response unchanged
	return response

	def send_to_openobserve(logs):
	"""Sends logs to OpenObserve via HTTP request"""
	try:
	url = f"https://{CONFIG['host']}/api/{CONFIG['organization']}/{CONFIG['stream']}/_json"
	headers = {
	"Content-Type": "application/json",
	"Authorization": "Basic " + base64.b64encode(CONFIG["auth"].encode()).decode()
	}

	# Convert logs to JSON
	json_data = json.dumps(logs)

	# Make the HTTP request
	response = http.request("POST", url, body=json_data, headers=headers)

	# Handle HTTP response status
	if response.status < 200 or response.status >= 300:
	logger.error(f"OpenObserve returned status code {response.status}")
	else:
	logger.info("Successfully sent logs to OpenObserve")

	except Exception as e:
	logger.error(f"Error sending logs to OpenObserve: {str(e)}")