> For the complete documentation index, see [llms.txt](https://elastiflow.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://elastiflow.gitbook.io/docs/elastiflow-documentation/configuration-reference/unified-flow-collector/overview-4.md).

# Overview

The ElastiFlow Unified Flow Collector can collect AWS VPC Flow Logs which are stored in S3. All fields are supported from VPC Flow Log versions 2 thru 5.

When ElastiFlow processes logs from the specified S3 bucket, the input moves them to the `elastiflow-processed` folder. This behavior is essential to ensure that the collector can easily identify and exclude already processed logs on subsequent queries, thereby preventing the reprocessing of the same logs. The schema of the logs remains unchanged; only their location within the S3 bucket is modified.

## EF\_AWS\_VPC\_FLOW\_LOG\_ENABLE

* Valid Values
  * `true`, `false`
* Default
  * `false`

## EF\_AWS\_VPC\_FLOW\_LOG\_S3\_BUCKET

The S3 bucket from which to fetch AWS VPC Flow Logs.

* Default
  * `''`

## EF\_AWS\_VPC\_FLOW\_LOG\_PREFIX

* Default
  * `AWSLogs`

## EF\_AWS\_VPC\_FLOW\_LOG\_POOL\_SIZE

Specifies the number of concurrent workers to start. Increasing the number of workers will allow the collector to better handle a processing vpc flow logs in s3.

* Default
  * `number of license units`

## EF\_AWS\_VPC\_FLOW\_LOG\_TLS\_ENABLE

This setting is used to enable/disable TLS connections to AWS S3.

* Valid Values
  * `true`, `false`
* Default
  * `false`

## EF\_AWS\_VPC\_FLOW\_LOG\_TLS\_SKIP\_VERIFICATION

This setting is used to enable/disable TLS verification of the AWS S3 endpoint to which the input is attempting to connect.

* Valid Values
  * `true`, `false`
* Default
  * `false`

## EF\_AWS\_VPC\_FLOW\_LOG\_TLS\_CA\_CERT\_FILEPATH

The path to the Certificate Authority (CA) certificate to use for verification of the AWS S3 endpoint to which the input is attempting to connect.

* Default
  * `''`

## EF\_AWS\_VPC\_FLOW\_LOG\_TLS\_MIN\_VERSION

This setting is used to set the TLS minimum version

* Valid Values
  * `1.2`, `1.3`
* Default
  * `1.2`

## AWS\_REGION

The AWS SDK compatible environment variable that specifies the AWS Region to send the request to.

## AWS\_ACCESS\_KEY\_ID

Specifies an AWS access key associated with an IAM user or role.

## AWS\_SECRET\_ACCESS\_KEY

Specifies the secret key associated with the access key. This is essentially the "password" for the access key.