Solved: How to ingest cloudwatch vpc flowlogs with Splunk ... - Splunk Community

All Apps and Add-ons

Has anyone found a way to ingest VPC flowlogs into Splunk with just API GETs (without using AWS lambda)?

1 Solution

Solution

So I manually exported vpc logs with awscli to an s3 bucket, then I have splunk read the bucket. That seems to work, now I am going to script it.

View solution in original post

Solution

So I manually exported vpc logs with awscli to an s3 bucket, then I have splunk read the bucket. That seems to work, now I am going to script it.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers, So you searched, “what is the name of the usb key inserted by bob smith?” Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register Is your ...