---
title: "Ingest logs from AWS Kinesis Firehose"
method: POST
path: "/aws/{org_id}/{stream_name}/_kinesis_firehose"
tags: ["Logs"]
---

# Ingest logs from AWS Kinesis Firehose

`POST /aws/{org_id}/{stream_name}/_kinesis_firehose`

## Request

- Base URL: `https://api.openobserve.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.openobserve.ai/aws/{org_id}/{stream_name}/_kinesis_firehose`
- Auth: API key in header `X-Amz-Firehose-Access-Key`
- TypeScript: <https://skmtc.dev/openobserve/apis/openobserve-api-http/docs/aws/:org_id/:stream_name/_kinesis_firehose/post.ts> (a function with typed inputs; its response is checked against the schema)

Ingests log data from AWS Kinesis Data Firehose in the native Kinesis format. This endpoint handles the specific request/response structure expected by Kinesis Firehose, making it seamless to stream AWS CloudWatch logs and other AWS services directly into OpenObserve.

## Path parameters

- `org_id` string, required
- `stream_name` string, required

## Request body

- object
  - `records` KFHRecordRequest[], required
    - `data` string, required
  - `requestId` string, required
  - `timestamp` integer, nullable

## Response `200`

Success

- object
  - `errorMessage` string, nullable
  - `requestId` string, required
  - `timestamp` integer, required

## Other responses

- `400`: Request rejected, or no record stored because every record was rejected
- `500`: Write to storage failed, or the stream started deleting mid-write

---

[API](https://skmtc.dev/openobserve/apis/openobserve-api-http.md) - [All operations](https://skmtc.dev/openobserve/apis/openobserve-api-http/llms.txt) - [OpenAPI document](https://skmtc.dev/openobserve/apis/openobserve-api-http/revisions/0529b8a10252?raw)