All Apps and Add-ons

AWS ELB logs not correctly parsing

krisrmal
Engager

Hi,

I'm using Add-on for Amazon Web Services version 5.0.0

I have ingested ALB logs as described in https://docs.splunk.com/Documentation/AddOns/released/AWS/IncrementalS3.

Now I could see the logs are being indexed. However, those events still not parsing correctly. still I could see only the raw logs.

Is there anyone who could successfully parse the AWS ALB logs? I'm using Index cluster. 

I have followed the below thread, though it is bit old. Still no luck. 

https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-Add-on-for-Amazon-Web-Services-Why-are-A...

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...

Explore the Latest Educational Offerings from Splunk [January 2025 Updates]

At Splunk Education, we are committed to providing a robust learning experience for all users, regardless of ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...