https://community.splunk.com/t5/Getting-Data-In/AWS-SQS-Logs-not-ingested-by-Splunk-Enterprise/m-p/572283#M101285 <P>I've deployed&nbsp; an architecture with a centralized s3 bucket that forwards AWS logs to an SQS queue. In Splunk side, I have an enterprise edition, already installed the Splunk Add-ons for AWS, set the input as Custom&gt;SQS and Configurations as follows:</P><P>- account number, access keys</P><P>- IAM role with assume role permissions.</P><P>I stil can't get logs in Splunk, any guidance for trouble-shooting? Also, is it possible to share a reference example of SQS access policies?</P><P>&nbsp;</P><P>Thanks</P> Mon, 25 Oct 2021 14:14:29 GMT sbmsplunk 2021-10-25T14:14:29Z https://community.splunk.com/t5/Getting-Data-In/AWS-SQS-Logs-not-ingested-by-Splunk-Enterprise/m-p/572283#M101285 <P>I've deployed&nbsp; an architecture with a centralized s3 bucket that forwards AWS logs to an SQS queue. In Splunk side, I have an enterprise edition, already installed the Splunk Add-ons for AWS, set the input as Custom&gt;SQS and Configurations as follows:</P><P>- account number, access keys</P><P>- IAM role with assume role permissions.</P><P>I stil can't get logs in Splunk, any guidance for trouble-shooting? Also, is it possible to share a reference example of SQS access policies?</P><P>&nbsp;</P><P>Thanks</P> Mon, 25 Oct 2021 14:14:29 GMT https://community.splunk.com/t5/Getting-Data-In/AWS-SQS-Logs-not-ingested-by-Splunk-Enterprise/m-p/572283#M101285 sbmsplunk 2021-10-25T14:14:29Z