All Apps and Add-ons

AWS ELB logs not correctly parsing

krisrmal
Engager

Hi,

I'm using Add-on for Amazon Web Services version 5.0.0

I have ingested ALB logs as described in https://docs.splunk.com/Documentation/AddOns/released/AWS/IncrementalS3.

Now I could see the logs are being indexed. However, those events still not parsing correctly. still I could see only the raw logs.

Is there anyone who could successfully parse the AWS ALB logs? I'm using Index cluster. 

I have followed the below thread, though it is bit old. Still no luck. 

https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-Add-on-for-Amazon-Web-Services-Why-are-A...

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...