---
title: "AWS Client VPN Connection Logs"
slug: "aws-client-vpn-connection-logs"
tags: ["Self Service Ingestion"]
updated: 2025-04-30T11:09:57Z
published: 2025-04-30T11:09:57Z
canonical: "docs.hunters.ai/aws-client-vpn-connection-logs"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hunters.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS Client VPN Connection Logs

Self Service Ingestion

          

Connect this data source on your own, using the Hunters platform.

## Overview

![](https://cdn.document360.io/5f63f0e0-3c70-4d00-b623-82493be0bde5/Images/Documentation/Client VPN.png?sv=2026-02-06&spr=https&st=2026-11-11T09%3A08%3A42Z&se=2026-11-11T10%3A08%3A42Z&sr=c&sp=r&sig=ErzAjF4p0Eiz3l%2BcbUOMC8%2B2n5hqi%2FwBQLRTrOdAHro%3D)**Table name:** `aws_client_vpn_logs`

[AWS Client VPN Connection Logs](https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/connection-logging.html) contain connection log entires. Each connection log entry contains information about a connection event, which is when a client (end user) connects, attempts to connect, or disconnects from your Client VPN endpoint. You can use this information to run forensics, analyze how your Client VPN endpoint is being used, or debug connection issues.

## Send data to Hunters

In order to integrate with different systems and tools, Amazon AWS Client VPN exports connection logs to Amazon [Cloudwatch](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Working-with-log-groups-and-streams.html) as stated [here](https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-with-connection-logs.html).

**To connect AWS Client VPN Connection Logs to Hunters:**

1. Follow [these guidelines](/v1/docs/connect-cloudwatch-to-s3-using-lambda) to ship the logs to a destination bucket.
2. Once the export is completed and the logs are collected to S3, follow the steps in [this section](https://hunters.document360.io/docs/connect-data-through-aws-s3).

## Expected format

Logs are expected in NDJSON format.

```json
{"connection-log-type":"connection-attempt","connection-attempt-status":"successful","connection-reset-status":"NA","connection-attempt-failure-reason":"NA","connection-id":"cvpn-connection-abc123abc123abc12","client-vpn-endpoint-id":"cvpn-endpoint-aaa111bbb222ccc33","transport-protocol":"udp","connection-start-time":"2020-03-26 20:37:15","connection-last-update-time":"2020-03-26 20:37:15","client-ip":"10.0.1.2","common-name":"client1","device-type":"mac","device-ip":"98.247.202.82","port":"50096","ingress-bytes":"0","egress-bytes":"0","ingress-packets":"0","egress-packets":"0","connection-end-time":"NA","username":"joe"}"}
```