https://community.splunk.com/t5/Splunk-Search/Data-Input-not-working-for-s3-plugin-perhaps-inputs-conf-spec-is/m-p/20975#M177325 <P>File /opt/splunk/etc/apps/s3/README/inputs.conf.spec:</P> <P>[s3://umi-mf-cdnlogs]</P> <P>key_id = AKIA</P> <P>secret_key = EOW5NUqjoJ<IMG src="http://splunk-base.splunk.com//storage/s3-plugin.png" alt="alt text" /></P> <P>~<BR /><BR /> ~ </P> Wed, 06 Feb 2013 02:03:35 GMT boris 2013-02-06T02:03:35Z https://community.splunk.com/t5/Splunk-Search/Data-Input-not-working-for-s3-plugin-perhaps-inputs-conf-spec-is/m-p/20975#M177325 <P>File /opt/splunk/etc/apps/s3/README/inputs.conf.spec:</P> <P>[s3://umi-mf-cdnlogs]</P> <P>key_id = AKIA</P> <P>secret_key = EOW5NUqjoJ<IMG src="http://splunk-base.splunk.com//storage/s3-plugin.png" alt="alt text" /></P> <P>~<BR /><BR /> ~ </P> Wed, 06 Feb 2013 02:03:35 GMT https://community.splunk.com/t5/Splunk-Search/Data-Input-not-working-for-s3-plugin-perhaps-inputs-conf-spec-is/m-p/20975#M177325 boris 2013-02-06T02:03:35Z https://community.splunk.com/t5/Splunk-Search/Data-Input-not-working-for-s3-plugin-perhaps-inputs-conf-spec-is/m-p/20976#M177326 <P>does that bucket have a contain called tiles-cdn? </P> <P>I've got an input for cloudfront:</P> <PRE><CODE>[s3://freesoft001] key_id = AKIA # This is Amazon key ID. secret_key = riuvl # This is the secret key. sourcetype=freesoft_cloudfront </CODE></PRE> <P>which captures my S3 logs no problem. freesoft001 has a container called cloud-front, and Splunk successfully traverses down into it, but it doesn't show up on my inputs screen.</P> <P><IMG src="http://answers.splunk.com//storage/2014-01-27_11-02-21.png" alt="alt text" /></P> Mon, 27 Jan 2014 19:04:27 GMT https://community.splunk.com/t5/Splunk-Search/Data-Input-not-working-for-s3-plugin-perhaps-inputs-conf-spec-is/m-p/20976#M177326 khourihan_splun 2014-01-27T19:04:27Z