All Apps and Add-ons

How do I load CloudTrail/AWS data from local file/directory?

drutstein
Explorer

AWS Add-On documentation identifies configuring inputs using AWS services such as S3, SQS, Kinesis, etc. I'm trying to load the downloaded Cloudtrail data from a local directory but don't see an option for this. Since this is a one-off analysis I don't need a continuous input stream. Does anyone know how I can use the downloaded .json.gz files as inputs for AWS cloudtrail data with the AWS add-on?

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...