I am using the Splunk Cloud Trial and trying to setup CloudTrail integration.
On this page:
Data inputs » AWS CloudTrail » Add new
I see a dropdown meant to have AWS accounts. For me, it is empty. Underneath it is written, "Select an AWS account. To configure AWS accounts, go to the setup page." I am unable to find the appropriate "setup page" to do this. Where is it?
The latest version of the Splunk App for AWS version 4.0 (https://splunkbase.splunk.com/app/1274/) has simplified the process of adding one or more AWS accounts. All configurations for additional AWS accounts and data sources (CloudTrail, Config, VPC Flow Logs, CloudWatch, etc.) are now done all within the Splunk App for AWS. Here are the instructions on how to configure additional AWS accounts for the Splunk App for AWS.
https://docs.splunk.com/Documentation/AWS/4.0.0/Installation/Setuptheapp
To enter AWS credentials go to Manage Apps screen, click Set up under Actions in the row for Splunk Add-on for AWS.
I have the exact same problem. Could someone explain to me how to get that "Manage Apps"?
why It is so difficult to simply add my AWS credential ?
Go to the App menu on the upper left and Manage Apps is the second to last item.
Well, in Splunk Cloud you'd need to contact Ops to get apps installed for you.
Thank you d.
I am having trouble finding the "Manage Apps" screen; can you tell me how to get there? Note that I am using the Splunk Cloud trial.