Solved: How to ingest cloudwatch vpc flowlogs with Splunk ... - Splunk Community

All Apps and Add-ons

Has anyone found a way to ingest VPC flowlogs into Splunk with just API GETs (without using AWS lambda)?

1 Solution

Solution

So I manually exported vpc logs with awscli to an s3 bucket, then I have splunk read the bucket. That seems to work, now I am going to script it.

View solution in original post

Solution

So I manually exported vpc logs with awscli to an s3 bucket, then I have splunk read the bucket. That seems to work, now I am going to script it.

Get Updates on the Splunk Community!

Agentic Operations Start with Context: Build the Right Data Foundation

Agentic Operations Start with Context: Build the Right Data Foundation By Courtney Wright, Product Marketing ...

Assisted, Augmented or Agentic? Choose Your Splunk Starting Point

Assisted, Augmented or Agentic? Choose Your Splunk Starting Point By Courtney Wright, Product Marketing ...

Session 2 | Beyond the Thread: Operationalizing AI with Confidence

Session 2 Beyond the Thread: Operationalizing AI with Confidence The true power of the Cisco Data Fabric ...