topic Re: Current Month Estimated Billing not displaying Account ID in drop-down in Splunk Search

Current Month Estimated Billing not displaying Account ID in drop-down

nehaprasad14 — Thu, 19 Jul 2018 16:29:50 GMT

Unable to get billing details in Splunk App for AWS. I have configured the billing input in Splunk Add-on apps.

Re: Current Month Estimated Billing not displaying Account ID in drop-down

adonio — Thu, 19 Jul 2018 17:37:51 GMT

do you have billing data?
https://docs.splunk.com/Documentation/AddOns/released/AWS/ConfigureAWS#Configure_billing
try and search index = * sourcetype = aws:billing OR sourcetype = aws:billing:cur

Re: Current Month Estimated Billing not displaying Account ID in drop-down

nehaprasad14 — Thu, 19 Jul 2018 17:44:09 GMT

Yes, I already did this step. I am getting the search results in Splunk Add-on App. But its not displaying in the same data in my Splunk App for AWS.

Re: Current Month Estimated Billing not displaying Account ID in drop-down

adonio — Thu, 19 Jul 2018 18:19:10 GMT

did you verify the search returned results?
what index does the data sits in?
does your user role searches that index by default?

Re: Current Month Estimated Billing not displaying Account ID in drop-down

nehaprasad14 — Thu, 19 Jul 2018 18:25:42 GMT

Yes, this is my search criteria : index = "main" sourcetype = "aws:billing" OR sourcetype = "aws:billing:cur"
and this is the results:
4,417 events (7/1/18 12:00:00.000 AM to 7/19/18 6:21:58.000 PM)

Re: Current Month Estimated Billing not displaying Account ID in drop-down

nehaprasad14 — Thu, 19 Jul 2018 18:28:16 GMT

But when I go to Splunk App for AWS -> Billing. It does not produces any search results nor does it populate my Account Id

Re: Current Month Estimated Billing not displaying Account ID in drop-down

nehaprasad14 — Fri, 20 Jul 2018 19:05:27 GMT

Thanks for your help.. I figured the issue.. My AWS reports configuration was not proper.