[AWS][Firehose] Documentation

[tetianakravchenko]

With no Control security privileges defined, Direct PUT source and es_datastream_name: some-name parameter set and tested with test data - I don't see any data ingested

our current documentation https://www.elastic.co/guide/en/integrations/current/awsfirehose.html use as an example for es_datastream_name: dev-vpcflow-logs this name format is not supported and it should be fixed with the explanation what is the expected format, for example on this page for the setup is mentioned to use parameters: es_datastream_name: logs-aws.cloudtrail-default (also on this page is used correct value)

[Kavindu-Dodan]

Existing documentations

Integration - https://www.elastic.co/guide/en/integrations/current/awsfirehose.html
Elastic docs - https://www.elastic.co/guide/en/kinesis/master/aws-firehose-setup-guide.html

Current problem

We do not highlight the importance of the data stream name when customizing the integration. The es_datastream_name parameter accepts the cusom stream name and should match with the dedicated data stream names.

For metrics - metrics-aws.cloudwatch-* (Backed by managed index template metrics-aws.cloudwatch)
For logs - logs-awsfirehose-* (Backed by managed index template logs-awsfirehose)

Also, we should highlight why naming matters. In this case, these are optimized for firehose data ingestion and managed by the index templates given above.

[Kavindu-Dodan]

Once Documentation update through elastic/observability-docs#4818 is ready, we must cross Integration to the updated documentation

[bturquet]

Everything is merged, closing the issue