---
title: "Logs collection methods | Grafana Labs"
description: "Compare logs collection methods for AWS, Azure, and GCP."
---

> For a curated documentation index, see [llms.txt](/llms.txt). For the complete documentation index, see [llms-full.txt](/llms-full.txt).

## Collection methods by cloud provider

| Cloud     | Method          | Best for                                         |
|-----------|-----------------|--------------------------------------------------|
| **AWS**   | Firehose        | High-volume CloudWatch logs (most use cases)     |
| **AWS**   | Lambda agent    | Specific log types (ALB, CloudFront, CloudTrail) |
| **Azure** | Functions       | Event-driven from Event Hub                      |
| **Azure** | Alloy           | Event Hub with flexible processing               |
| **GCP**   | Alloy + Pub/Sub | All GCP logs                                     |

## Quick decision for AWS

| Scenario                                 | Recommended method |
|------------------------------------------|--------------------|
| High log volumes, cost-sensitive         | **Firehose**       |
| CloudWatch logs from apps, RDS, VPC Flow | **Firehose**       |
| ALB access logs, CloudFront, CloudTrail  | **Lambda agent**   |