I have configured AWS Add-on for Splunk and it is fetching data. But AWS app for Splunk not showing any data. I have tried searching the forum and google, I could not solve this.
Someone please advice what to do to get AWS app for Splunk to get data.
Thanks very much in advance :=)
Here is the link to the latest version of the Splunk App for AWS (https://splunkbase.splunk.com/app/1274/#/overview) that has made many improvements in ease of use regarding setting up various AWS data inputs ex. CloudTrail, Config, VPC Flow Logs, CloudWatch, S3, etc.
The latest installation guide for the Splunk App for AWS not only provides installation steps for the app, but also guidance on setting up the AWS services and IAM permissions for the Splunk App for AWS.