All Apps and Add-ons

AWS ELB logs not correctly parsing

krisrmal
Engager

Hi,

I'm using Add-on for Amazon Web Services version 5.0.0

I have ingested ALB logs as described in https://docs.splunk.com/Documentation/AddOns/released/AWS/IncrementalS3.

Now I could see the logs are being indexed. However, those events still not parsing correctly. still I could see only the raw logs.

Is there anyone who could successfully parse the AWS ALB logs? I'm using Index cluster. 

I have followed the below thread, though it is bit old. Still no luck. 

https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-Add-on-for-Amazon-Web-Services-Why-are-A...

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW!Every day the list of sources Admins are responsible for gets bigger and bigger, often making the ...

Remediate Threats Faster and Simplify Investigations With Splunk Enterprise Security ...

REGISTER NOW!Join us for a Tech Talk around our latest release of Splunk Enterprise Security 7.2! We’ll walk ...

Introduction to Splunk AI

WATCH NOWHow are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. ...