I know they are storing them somewhere. Maybe a DynamoDB or S3 bucket?
I'd like to use Cloudwatch as a log archive for my EC2 instances, and set it up so that they are passed to Loggly for viewing/sorting/ etc.
I know Loggly recently released a way to grab logs from S3 buckets (https://www.loggly.com/docs/s3-logs/) but I can't seem to find the source of these logs on the AWS side.
My thoughts so far are:
This API will let you export data to S3, however note it's for historical data not real time... data up to a few hours old will not be available to export, so most useful for daily extracts: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/S3Export.html
For realtime delivery you would want to use the Subscriptions API: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/Subscriptions.html