All Apps and Add-ons

Splunk AWS data inputs

ksi_custr
Explorer

Hi

I am trying to collect data from our AWS VPC. I have setup an EC2 instance on that VPC and the Splunk AWS app and addon were installed and configured. IAM role were attached on the said Ec2 instance and the right permission for all inputs were given. However, I am encountering the below error alt text

Is there any configurations that I need to do. I did everything that is describe on the docs and on the below video.
https://www.youtube.com/watch?v=ZITShqH5z8M

Thanks,

0 Karma

ksi_custr
Explorer

Hi All, for all those whose looking answer for this.
Solved the issue by allowing certain rules on the security groups. the EC2 instance where the addon was installed should be able to access the internet.

Security group rules:
src: your_server
dest: 0.0.0.0/0
dest_port: 443

0 Karma

ksi_custr
Explorer

Hi Splunkers, Do I need to allow certain connections/ports on our firewall?
Thanks

0 Karma

ksi_custr
Explorer

solved the issue on name resolution. But I now get the timed out error when configuring input form CloudWatch Logs.
alt text

Any idea on this? Thanks.

0 Karma
Get Updates on the Splunk Community!

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...