After upgrading the Splunk Add-on for Amazon Web Services from 4.0.0 to 4.1.1, why did inputs stop collecting data and accounts are missing?

[yannK]

While using the Splunk Add-on for Amazon Web Services and the Splunk App for AWS, I got in a situation where all my inputs stopped after upgrading the add-on from 4.0.0 to 4.1.1

The symptoms were:

• no data collection
• many accounts missing or not found on the internal AWS logs.
• warning icon on the accounts page on the add-on on the region column "Not set, please edit this account"

Also, when editing an account from the APP (not the add-on ), the accounts were removed when we saved them.

The workaround was to:

• edit the accounts one by one from the add-on
• add the region
• save, and check the warning

Recommendation: use the Add-on inputs manager rather than the app one.

[yannK · Accepted solution]

The workaround was to

• edit the accounts one by one from the add-on
• add the region
• save, and check the warning