All Apps and Add-ons

After upgrading the Splunk Add-on for Amazon Web Services from 4.0.0 to 4.1.1, why did inputs stop collecting data and accounts are missing?

yannK
Splunk Employee
Splunk Employee

While using the Splunk Add-on for Amazon Web Services and the Splunk App for AWS, I got in a situation where all my inputs stopped after upgrading the add-on from 4.0.0 to 4.1.1

The symptoms were:

  • no data collection
  • many accounts missing or not found on the internal AWS logs.
  • warning icon on the accounts page on the add-on on the region column "Not set, please edit this account"

List item

Also, when editing an account from the APP (not the add-on ), the accounts were removed when we saved them.

The workaround was to:

  • edit the accounts one by one from the add-on
  • add the region
  • save, and check the warning

Recommendation: use the Add-on inputs manager rather than the app one.

1 Solution

yannK
Splunk Employee
Splunk Employee

The workaround was to

  • edit the accounts one by one from the add-on
  • add the region
  • save, and check the warning

View solution in original post

yannK
Splunk Employee
Splunk Employee

The workaround was to

  • edit the accounts one by one from the add-on
  • add the region
  • save, and check the warning
Get Updates on the Splunk Community!

Unlock New Opportunities with Splunk Education: Explore Our Latest Courses!

At Splunk Education, we’re dedicated to providing top-tier learning experiences that cater to every skill ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...