topic Why are we not getting data of AWS EC2 instances &amp; ELBs in splunk aws app? in Splunk Enterprise https://community.splunk.com/t5/Splunk-Enterprise/Why-are-we-not-getting-data-of-AWS-EC2-instances-amp-ELBs-in/m-p/642218#M16236 <P>hi,</P> <P>I am not getting data of AWS in Splunk for AWS app. Mentioned configuration done.<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-05-02 at 3.27.45 PM.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/25218iFDCC66A226912743/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2023-05-02 at 3.27.45 PM.png" alt="Screenshot 2023-05-02 at 3.27.45 PM.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-05-02 at 3.28.24 PM.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/25219i0372D46CB8EAAE05/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2023-05-02 at 3.28.24 PM.png" alt="Screenshot 2023-05-02 at 3.28.24 PM.png" /></span></P> <P>Also splunk_role created with mentioned Policies&amp; attached to splunk instance. Also tried with new splunk user created with admin access &amp; attached same policy, still data not reflecting.<BR />policy:<BR />{<BR />"Version": "2012-10-17",<BR />"Statement": [<BR />{<BR />"Effect": "Allow",<BR />"Action": [<BR />"ec2:DescribeInstances",<BR />"ec2:DescribeReservedInstances",<BR />"ec2:DescribeSnapshots",<BR />"ec2:DescribeRegions",<BR />"ec2:DescribeKeyPairs",<BR />"ec2:DescribeNetworkAcls",<BR />"ec2:DescribeSecurityGroups",<BR />"ec2:DescribeSubnets",<BR />"ec2:DescribeVolumes",<BR />"ec2:DescribeVpcs",<BR />"ec2:DescribeImages",<BR />"ec2:DescribeAddresses",<BR />"lambda:ListFunctions",<BR />"rds:DescribeDBInstances",<BR />"cloudfront:ListDistributions",<BR />"iam:GetUser",<BR />"iam:ListUsers",<BR />"iam:GetAccountPasswordPolicy",<BR />"iam:ListAccessKeys",<BR />"iam:GetAccessKeyLastUsed",<BR />"iam:GetPolicyVersion",<BR />"iam:ListUserPolicies",<BR />"iam:ListAttachedUserPolicies",<BR />"elasticloadbalancing:DescribeLoadBalancers",<BR />"elasticloadbalancing:DescribeInstanceHealth",<BR />"elasticloadbalancing:DescribeTags",<BR />"elasticloadbalancing:DescribeTargetGroups",<BR />"elasticloadbalancing:DescribeTargetHealth",<BR />"elasticloadbalancing:DescribeListeners",<BR />"s3:ListAllMyBuckets",<BR />"s3:GetAccelerateConfiguration",<BR />"s3:GetBucketCORS",<BR />"s3:GetLifecycleConfiguration",<BR />"s3:GetBucketLocation",<BR />"s3:GetBucketLogging",<BR />"s3:GetBucketTagging"<BR />],<BR />"Resource": [<BR />"*"<BR />]<BR />}<BR />]<BR />}</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-05-04 at 9.47.35 AM.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/25220iC2C81A5BF69AF1E5/image-size/medium?v=v2&amp;px=400" role="button" title="Screenshot 2023-05-04 at 9.47.35 AM.png" alt="Screenshot 2023-05-04 at 9.47.35 AM.png" /></span></P> <P> </P> Thu, 04 May 2023 14:58:09 GMT nikhilmfwd 2023-05-04T14:58:09Z Why are we not getting data of AWS EC2 instances & ELBs in splunk aws app? https://community.splunk.com/t5/Splunk-Enterprise/Why-are-we-not-getting-data-of-AWS-EC2-instances-amp-ELBs-in/m-p/642218#M16236 <P>hi,</P> <P>I am not getting data of AWS in Splunk for AWS app. Mentioned configuration done.<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-05-02 at 3.27.45 PM.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/25218iFDCC66A226912743/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2023-05-02 at 3.27.45 PM.png" alt="Screenshot 2023-05-02 at 3.27.45 PM.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-05-02 at 3.28.24 PM.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/25219i0372D46CB8EAAE05/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2023-05-02 at 3.28.24 PM.png" alt="Screenshot 2023-05-02 at 3.28.24 PM.png" /></span></P> <P>Also splunk_role created with mentioned Policies&amp; attached to splunk instance. Also tried with new splunk user created with admin access &amp; attached same policy, still data not reflecting.<BR />policy:<BR />{<BR />"Version": "2012-10-17",<BR />"Statement": [<BR />{<BR />"Effect": "Allow",<BR />"Action": [<BR />"ec2:DescribeInstances",<BR />"ec2:DescribeReservedInstances",<BR />"ec2:DescribeSnapshots",<BR />"ec2:DescribeRegions",<BR />"ec2:DescribeKeyPairs",<BR />"ec2:DescribeNetworkAcls",<BR />"ec2:DescribeSecurityGroups",<BR />"ec2:DescribeSubnets",<BR />"ec2:DescribeVolumes",<BR />"ec2:DescribeVpcs",<BR />"ec2:DescribeImages",<BR />"ec2:DescribeAddresses",<BR />"lambda:ListFunctions",<BR />"rds:DescribeDBInstances",<BR />"cloudfront:ListDistributions",<BR />"iam:GetUser",<BR />"iam:ListUsers",<BR />"iam:GetAccountPasswordPolicy",<BR />"iam:ListAccessKeys",<BR />"iam:GetAccessKeyLastUsed",<BR />"iam:GetPolicyVersion",<BR />"iam:ListUserPolicies",<BR />"iam:ListAttachedUserPolicies",<BR />"elasticloadbalancing:DescribeLoadBalancers",<BR />"elasticloadbalancing:DescribeInstanceHealth",<BR />"elasticloadbalancing:DescribeTags",<BR />"elasticloadbalancing:DescribeTargetGroups",<BR />"elasticloadbalancing:DescribeTargetHealth",<BR />"elasticloadbalancing:DescribeListeners",<BR />"s3:ListAllMyBuckets",<BR />"s3:GetAccelerateConfiguration",<BR />"s3:GetBucketCORS",<BR />"s3:GetLifecycleConfiguration",<BR />"s3:GetBucketLocation",<BR />"s3:GetBucketLogging",<BR />"s3:GetBucketTagging"<BR />],<BR />"Resource": [<BR />"*"<BR />]<BR />}<BR />]<BR />}</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-05-04 at 9.47.35 AM.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/25220iC2C81A5BF69AF1E5/image-size/medium?v=v2&amp;px=400" role="button" title="Screenshot 2023-05-04 at 9.47.35 AM.png" alt="Screenshot 2023-05-04 at 9.47.35 AM.png" /></span></P> <P> </P> Thu, 04 May 2023 14:58:09 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-are-we-not-getting-data-of-AWS-EC2-instances-amp-ELBs-in/m-p/642218#M16236 nikhilmfwd 2023-05-04T14:58:09Z Re: Why are we not getting data of AWS EC2 instances & ELBs in splunk aws app? https://community.splunk.com/t5/Splunk-Enterprise/Why-are-we-not-getting-data-of-AWS-EC2-instances-amp-ELBs-in/m-p/642346#M16251 <P>Hello Team,</P><P>Please help for this.</P> Fri, 05 May 2023 04:47:46 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-are-we-not-getting-data-of-AWS-EC2-instances-amp-ELBs-in/m-p/642346#M16251 nikhilmfwd 2023-05-05T04:47:46Z