All Apps and Add-ons

After upgrading the Splunk Add-on for Amazon Web Services from 4.0.0 to 4.1.1, why did inputs stop collecting data and accounts are missing?

yannK
Splunk Employee
Splunk Employee

While using the Splunk Add-on for Amazon Web Services and the Splunk App for AWS, I got in a situation where all my inputs stopped after upgrading the add-on from 4.0.0 to 4.1.1

The symptoms were:

  • no data collection
  • many accounts missing or not found on the internal AWS logs.
  • warning icon on the accounts page on the add-on on the region column "Not set, please edit this account"

List item

Also, when editing an account from the APP (not the add-on ), the accounts were removed when we saved them.

The workaround was to:

  • edit the accounts one by one from the add-on
  • add the region
  • save, and check the warning

Recommendation: use the Add-on inputs manager rather than the app one.

1 Solution

yannK
Splunk Employee
Splunk Employee

The workaround was to

  • edit the accounts one by one from the add-on
  • add the region
  • save, and check the warning

View solution in original post

yannK
Splunk Employee
Splunk Employee

The workaround was to

  • edit the accounts one by one from the add-on
  • add the region
  • save, and check the warning
Get Updates on the Splunk Community!

Fall Into Learning with New Splunk Education Courses

Every month, Splunk Education releases new courses to help you branch out, strengthen your data science roots, ...

Super Optimize your Splunk Stats Searches: Unlocking the Power of tstats, TERM, and ...

By Martin Hettervik, Senior Consultant and Team Leader at Accelerate at Iver, Splunk MVPThe stats command is ...

How Splunk Observability Cloud Prevented a Major Payment Crisis in Minutes

Your bank's payment processing system is humming along during a busy afternoon, handling millions in hourly ...