Amazon Data Firehose (Firehose) decompression for CloudWatch Logs now supports message extraction, so customers can automatically filter out header information and deliver only the message content from their CloudWatch logs to destinations such as Amazon S3 and Splunk for analytics.
Source:: Amazon AWS