topic Re: What is Splunk App for AWS and how can I configure it in All Apps and Add-ons

What is Splunk App for AWS and how can I configure it

bjyoti — Tue, 29 Jul 2014 05:03:24 GMT

Hi All,

I am exporing splunk these days. I have installed splunk enterprize on my linux machine. I want to monitor my AWS account logs on splunk. For this I have want to install Splunk app for AWS.

Here are my queries :

What are the prerequisites for the installing and configuring the splunk app.
Is it required to have cloud trail in my aws account.
which file should I edit to enter my aws keys to review the logs ?

Re: What is Splunk App for AWS and how can I configure it

gkanapathy — Tue, 29 Jul 2014 05:24:22 GMT

The documentation with the app is pretty straightforward. To summarize them, you need Splunk, and yes, you need to configure CloudTrail in AWS. You don't need to edit config files (though you can if you want and are familiar with it) but you can just configure a new CloudTrail input. Most people will need only one, but if you're logging different regions to different places, or have multiple accounts, you can configure multiple CloudTrail inputs.

Re: What is Splunk App for AWS and how can I configure it

bjyoti — Tue, 29 Jul 2014 05:32:34 GMT

I have configured cloud trail on my AWS account but I cant see any data in my Splunk App for AWS. DO I need to update my aws keys in any of the file in splunk app ???Please help

Re: What is Splunk App for AWS and how can I configure it

bjyoti — Tue, 29 Jul 2014 07:32:35 GMT

I have configured the cloud trail but getting error : std::bad_alloc