All Apps and Add-ons

AWS Inputs - some fields are visible on the AWS HF and not on the search head

rayar
Contributor

I have AWS app running
there are some fields for some guardduty events that are visible to the HF search only
also I see events with all fields visible on the search head as expected
what can be the reason ?
the integration is working with S3

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you installed the TA on the search head?

---
If this reply helps you, Karma would be appreciated.
0 Karma

rayar
Contributor

yes , also 90% are working properly and all fields are visible

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The remaining 10% may be either absent or not in a format expected by the app.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...