All Apps and Add-ons

After upgrading the Splunk Add-on for Amazon Web Services from 4.0.0 to 4.1.1, why did inputs stop collecting data and accounts are missing?

yannK
Splunk Employee
Splunk Employee

While using the Splunk Add-on for Amazon Web Services and the Splunk App for AWS, I got in a situation where all my inputs stopped after upgrading the add-on from 4.0.0 to 4.1.1

The symptoms were:

  • no data collection
  • many accounts missing or not found on the internal AWS logs.
  • warning icon on the accounts page on the add-on on the region column "Not set, please edit this account"

List item

Also, when editing an account from the APP (not the add-on ), the accounts were removed when we saved them.

The workaround was to:

  • edit the accounts one by one from the add-on
  • add the region
  • save, and check the warning

Recommendation: use the Add-on inputs manager rather than the app one.

1 Solution

yannK
Splunk Employee
Splunk Employee

The workaround was to

  • edit the accounts one by one from the add-on
  • add the region
  • save, and check the warning

View solution in original post

yannK
Splunk Employee
Splunk Employee

The workaround was to

  • edit the accounts one by one from the add-on
  • add the region
  • save, and check the warning
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...