https://community.splunk.com/t5/Getting-Data-In/Restoring-Default-Configuration-for-aws-s3-Sourcetype-in-Splunk/m-p/691899#M115044 <P>In Splunk, I added an AWS add-on and tried to get data from AWS S3. While creating the input, it took the sourcetype as aws:s3:csv by default, and I was receiving the data properly. However, I accidentally changed the configuration for the aws:s3:csv sourcetype, and now the logs are not being received correctly. Can anyone help me by providing the default configuration for this sourcetype?"</P> Thu, 27 Jun 2024 22:13:02 GMT Rahul_a 2024-06-27T22:13:02Z https://community.splunk.com/t5/Getting-Data-In/Restoring-Default-Configuration-for-aws-s3-Sourcetype-in-Splunk/m-p/691899#M115044 <P>In Splunk, I added an AWS add-on and tried to get data from AWS S3. While creating the input, it took the sourcetype as aws:s3:csv by default, and I was receiving the data properly. However, I accidentally changed the configuration for the aws:s3:csv sourcetype, and now the logs are not being received correctly. Can anyone help me by providing the default configuration for this sourcetype?"</P> Thu, 27 Jun 2024 22:13:02 GMT https://community.splunk.com/t5/Getting-Data-In/Restoring-Default-Configuration-for-aws-s3-Sourcetype-in-Splunk/m-p/691899#M115044 Rahul_a 2024-06-27T22:13:02Z https://community.splunk.com/t5/Getting-Data-In/Restoring-Default-Configuration-for-aws-s3-Sourcetype-in-Splunk/m-p/691938#M115052 <P>You should be able to remove your local changes by deleting local/props.conf from the AWS add-on directory and restarting Splunk.&nbsp; If you changed default/props.conf (never advised) then re-installing the add-on will restore the defaults.</P> Fri, 28 Jun 2024 13:05:41 GMT https://community.splunk.com/t5/Getting-Data-In/Restoring-Default-Configuration-for-aws-s3-Sourcetype-in-Splunk/m-p/691938#M115052 richgalloway 2024-06-28T13:05:41Z