I have used fluentd with s3 and fluentd with graylod this is excellent toll. Fluentd agentd pushes logs to s3 and after used athena service to query over on those logs.

I liked its reliability, easy to use, plugin model makes it highly extensively and customisable. Good performance with low cpu and memory consumption

Fluentd provides tones of plugins to collect data from different sources and store in different sinks. You can collect data from log files, databases, and even Kafka streams. You can process log contents with Fluentd and store with JSON format schema in files or even NoSQL. Fluentd is part of the Cloud Native Computing Foundation (CNCF). You can use Fluentd to collect Kubernetes and Docker logs and store in different cloud storage. The community is active. You can find help from Fluentd Slack workspace. If you're interested in collecting data from IoT devices, you can give fluent-bit [1] a try. [1] https://fluentbit.io/