AWS Cost and Usage Reports function tracks your AWS usage and provides estimated charges associated with your account. This integration allows you to ship logs from your AWS Cost and Usage Reports to your account.


Your Lambda function needs to run within the AWS Lambda limits, such as memory allocation and timeout. Make sure you understand these limits. If you can’t adjust your settings to stay within the Lambda limits, you can use the AWS Support Center console to request an increase. Learn more about AWS Lambda Limits.

This deployment will automatically create the following resources:


Login to your account

To begin, you need to login to your AWS account.

Create a new stack

Select the button below to create a new stack dedicated to sending the AWS cost and usage reports to

Deploy to AWS

Create stack

Keep the default setting in the Create stack screen and select Next.

Specify the stack details

Specify stack details

Specify the stack details as per the table below and select Next.

Parameter Description
Stack name logzio-cur-auto-deployment
CloudWatchEventScheduleExpression Default: rate(10 hours) The scheduling expression that determines when and how often the Lambda function runs. recommends to start with 10 hours rate.
LambdaMemorySize Default: 1024 (MB) The amount of memory available to the function at runtime. recommends to start with 1024 MB.
LambdaTimeout Default: 300 (seconds) The amount of time that Lambda allows a function to run before stopping it. recommends to start with 300 seconds (5 minutes).
LogzioToken Your log shipping token:<<LOG-SHIPPING-TOKEN>> Replace <<LOG-SHIPPING-TOKEN>> with the token of the account you want to ship to.
LogzioURL The listener URL: https://<<LISTENER-HOST>>:8071 Replace <<LISTENER-HOST>> with the host for your region. For example, if your account is hosted on AWS US East, or if hosted on Azure West Europe.
ReportAdditionalSchemaElements Choose INCLUDE if you want AWS to include additional details about individual resources IDs in the report (This might significantly increase the report size and might affect performance. AWS Lambda can run for up to 15 minutes with up to 10240 MB, and the process time for the whole file must end within this timeframe.) This is an optional parameter.
ReportName The name of report that you want to create.
ReportPrefix The prefix that AWS adds to the report name when AWS delivers the report.
ReportTimeUnit The granularity of the line items in the report. Can be Hourly, Daily or Monthly. (Enabling hourly reports does not mean that a new report is generated every hour. It means that data in the report is aggregated with a granularity of one hour.)
S3BucketName The name for the bucket which will contain the report files.
Configure the stack options

Configure stack options

Specify the Key and Value parameters for the Tags and select Next.

Review the deployment

Review deployment Confirm deployment

Confirm that you acknowledge that AWS CloudFormation might create IAM resources and select Create stack.

Check for your logs

Give your logs some time to get from your system to ours, and then open Kibana.

All logs that were sent from the Lambda function will be under the type billing.

To get more out of this functionality, you can enable a dedicated AWS cost and usage dashboard in ELK Apps.

If you still don’t see your logs, see log shipping troubleshooting.