Solved: How to ingest cloudwatch vpc flowlogs with Splunk ... - Splunk Community

All Apps and Add-ons

Has anyone found a way to ingest VPC flowlogs into Splunk with just API GETs (without using AWS lambda)?

1 Solution

Solution

So I manually exported vpc logs with awscli to an s3 bucket, then I have splunk read the bucket. That seems to work, now I am going to script it.

View solution in original post

Solution

So I manually exported vpc logs with awscli to an s3 bucket, then I have splunk read the bucket. That seems to work, now I am going to script it.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...