How to ingest cloudwatch vpc flowlogs with Splunk API GET?

[Log_wrangler]

Has anyone found a way to ingest VPC flowlogs into Splunk with just API GETs (without using AWS lambda)?

[Log_wrangler · Accepted solution]

So I manually exported vpc logs with awscli to an s3 bucket, then I have splunk read the bucket. That seems to work, now I am going to script it.