On-premise Splunk Enterprise with AWS CloudTrail

[faraodav]

Hello,

Will the Splunk App for AWS be able to send logging information from the AWS CloudTrail to my on-premise Splunk Enterprise deployment that is not currently installed on an AWS machine?

Thanks in advance for the information, I greatly appreciate it.

[saffrondigital]

Yes, it's perfectly possible as it uses AWS access credentials to connect to SNS and subscribe.