<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Is it possible to pull in flow logs from an S3 bucket? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-pull-in-flow-logs-from-an-S3-bucket/m-p/596296#M104122</link>
    <description>&lt;P&gt;Is it possible to pull in flow logs from an S3 bucket? The IAM role has been created but I'm not sure the data is being retrieved/parsed accurately. There was no input option for S3 when using the AWS add-on to pull in VPC flow logs(Only Kinesis or Cloudwatch). Can the input be configured manually or do we have to change where the vpc flow logs are stored?&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 03 May 2022 20:33:06 GMT</pubDate>
    <dc:creator>bsplunkj</dc:creator>
    <dc:date>2022-05-03T20:33:06Z</dc:date>
    <item>
      <title>Is it possible to pull in flow logs from an S3 bucket?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-pull-in-flow-logs-from-an-S3-bucket/m-p/596296#M104122</link>
      <description>&lt;P&gt;Is it possible to pull in flow logs from an S3 bucket? The IAM role has been created but I'm not sure the data is being retrieved/parsed accurately. There was no input option for S3 when using the AWS add-on to pull in VPC flow logs(Only Kinesis or Cloudwatch). Can the input be configured manually or do we have to change where the vpc flow logs are stored?&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 03 May 2022 20:33:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-pull-in-flow-logs-from-an-S3-bucket/m-p/596296#M104122</guid>
      <dc:creator>bsplunkj</dc:creator>
      <dc:date>2022-05-03T20:33:06Z</dc:date>
    </item>
  </channel>
</rss>

