Solved: How to ingest cloudwatch vpc flowlogs with Splunk ... - Splunk Community

All Apps and Add-ons

Has anyone found a way to ingest VPC flowlogs into Splunk with just API GETs (without using AWS lambda)?

1 Solution

Solution

So I manually exported vpc logs with awscli to an s3 bucket, then I have splunk read the bucket. That seems to work, now I am going to script it.

View solution in original post

Solution

So I manually exported vpc logs with awscli to an s3 bucket, then I have splunk read the bucket. That seems to work, now I am going to script it.

Get Updates on the Splunk Community!

Data Management Digest – August 2026

MichelleCorpora_1-1788182384472.png Welcome to the August 2026 edition of Data Management Digest! August was a ...

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next. Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...