All Apps and Add-ons

AWS ELB logs not correctly parsing

krisrmal
Engager

Hi,

I'm using Add-on for Amazon Web Services version 5.0.0

I have ingested ALB logs as described in https://docs.splunk.com/Documentation/AddOns/released/AWS/IncrementalS3.

Now I could see the logs are being indexed. However, those events still not parsing correctly. still I could see only the raw logs.

Is there anyone who could successfully parse the AWS ALB logs? I'm using Index cluster. 

I have followed the below thread, though it is bit old. Still no luck. 

https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-Add-on-for-Amazon-Web-Services-Why-are-A...

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...