How can we integrate AWS logs to SPLUNK on-premise solution (Data center)?
We are hosted some of the NON-CRITICAL aplications in AWS and Azure cloud platforms.
We are using on-premise SPLUNK solution. We want to integrate AWS and Azure logs to ON-PREMISE SPLUNK ENTERPRISE SECURITY SIEM
Could you please help us?
Integration with AWS environment can be done using those two apps.
The first one allows you to collect all AWS data :
The second is used for visualization, dashboards and reports :
The documentation for on prem installation can be found here :
Let me know if you have any other questions. Happy to help!