DatriseAI-first ETL

AWS CloudTrail to ThoughtSpot Integration

AI-first ETL from AWS CloudTrail into ThoughtSpot. Governed entities, incremental sync, typed landing tables.

How Datrise loads AWS CloudTrail into ThoughtSpot

Datrise syncs AWS CloudTrail's API events, identities, resources, event sources, error codes, and request parameters into ThoughtSpot as warehouse tables ThoughtSpot indexes for search. Flexible or custom fields land in flattened columns for searchable fields, and timestamps such as created, updated, and status changes are typed as date/time columns.

Sync is incremental: Datrise uses incremental refresh of the indexed tables, so re-runs update only what changed. Date-partitioned facts for live-query performance. ThoughtSpot search relies on clear names and relationships, so Datrise lands well-named, joinable tables.

Ideal for natural-language search analytics over a warehouse.

Endpoints

AWS CloudTrail: AWS account activity and API audit logging.

ThoughtSpot: Search-driven analytics with AI-assisted insights on warehouse data.

How AWS CloudTrail entities map to ThoughtSpot

AWS CloudTrail entityThoughtSpot objectNotes
API eventsaws_cloudtrail_api_eventsdate/time columns events
identitiesaws_cloudtrail_identitiesid PK · linked to aws_cloudtrail_api_events
resourcesaws_cloudtrail_resourcesid PK · linked to aws_cloudtrail_api_events
event sourcesaws_cloudtrail_event_sourcesdate/time columns events

FAQ

How does Datrise handle AWS CloudTrail's custom fields in ThoughtSpot?

Flexible values are stored as flattened columns for searchable fields, so new fields don't require a migration; strongly-typed fields — dates, numbers, and references — are promoted to native ThoughtSpot types.

How does the AWS CloudTrail to ThoughtSpot sync stay up to date?

It runs incrementally — Datrise uses incremental refresh of the indexed tables.

Related pipelines

Early access

Connect AWS CloudTrail to ThoughtSpot the easy way

Skip brittle scripts and manual exports. Join the waitlist to get a guided setup, AI-assisted mapping, and reliable incremental sync for this integration.