All Apps and Add-ons

How can I generate all_account_ids.csv with the Splunk Add-on for Amazon Web Services on a separate host?

drutstein
Explorer

We have the Splunk Add-on for Amazon Web Services running on a cluster of heavy forwarders pulling most data in from S3 inputs. The only exception is the description/metadata input which is configured through the bin/tools/configure/aws_config_cli.py command. Due to this separation it looks like the all_account_ids.csv lookup doesn't get generated to be used in the AWS App. How can I generate this separately?

abhijeetsapre
New Member

Use following in search for Splunk App for AWS

index=your_aws_index sourcetype="aws:addon:account" | dedup host, account_id, name | fields - _time |dedup account_id| table name, account_id | outputlookup all_account_ids

This should help.

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...