All Apps and Add-ons

Splunk Add-on for Amazon Web Services: Why are ALB access logs not received?

nikki603
Engager

I'm using the latest Splunk Add-on for Amazon Web Services to pull in access logs from an ALB but the Splunk logs don't indicate that any logs are being found even though I can see the log.gz files in S3, nor do they tell me what is wrong. I have an AWS::ElasticLoadBalancingV2::LoadBalancer with access logs enabled. Can anyone tell me what they are doing that works? I am configuring the Input as:

[splunk_ta_aws_logs://alb]
aws_account = IA Dev
bucket_name = development-alb-private-logging
bucket_region = us-east-1
host_name = s3.amazonaws.com
interval = 30
log_start_date = 2017-02-26
log_type = elb:accesslogs
sourcetype = aws:alb:accesslogs

splunk_ta_aws_logs_alb.log

2017-02-27 19:56:08,267 INFO pid=27657 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "host": "splunkenterprise", "max_fails": "10000", "interval": "30", "start_by_shell": "false", "log_type": "elb:accesslogs", "aws_account": "IA Dev", "max_retries": "-1", "log_start_date": "2017-02-26", "sourcetype": "aws:alb:accesslogs", "bucket_region": "us-east-1", "index": "default"}

2017-02-27 19:56:08,267 INFO pid=27657 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:56:07,846 INFO pid=27657 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:55:44,775 INFO pid=27384 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:55:44,774 INFO pid=27384 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:55:43,599 INFO pid=27408 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:55:43,575 INFO pid=27408 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:55:40,661 INFO pid=27408 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:55:40,660 INFO pid=27408 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:55:40,279 INFO pid=27408 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:55:40,279 INFO pid=27408 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:55:40,278 INFO pid=27408 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:55:40,275 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:55:40,274 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:55:40,182 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:55:39,329 INFO pid=27384 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:55:39,327 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:55:39,264 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:55:39,262 INFO pid=27384 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:55:39,029 INFO pid=27384 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:55:38,983 INFO pid=27384 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:55:38,280 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"start_by_shell": "false", "host": "splunkenterprise", "interval": "30", "max_fails": "10000", "sourcetype": "aws:alb:accesslogs", "aws_account": "IA Dev", "index": "default", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "max_retries": "-1", "log_start_date": "2017-02-26", "bucket_name": "development-alb-private-logging", "log_type": "elb:accesslogs"}

2017-02-27 19:55:38,279 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:55:37,836 INFO pid=27384 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:55:15,548 INFO pid=27173 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:55:15,547 INFO pid=27173 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:55:13,931 INFO pid=27198 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:55:13,884 INFO pid=27198 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:55:10,914 INFO pid=27198 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:55:10,913 INFO pid=27198 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:55:10,322 INFO pid=27198 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:55:10,322 INFO pid=27198 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:55:10,316 INFO pid=27198 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:55:10,313 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:55:10,312 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:55:10,215 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:55:09,912 INFO pid=27173 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:55:09,904 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:55:09,814 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:55:09,812 INFO pid=27173 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:55:09,564 INFO pid=27173 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:55:09,510 INFO pid=27173 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:55:08,354 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "aws_account": "IA Dev", "sourcetype": "aws:alb:accesslogs", "bucket_name": "development-alb-private-logging", "max_fails": "10000", "host": "splunkenterprise", "log_type": "elb:accesslogs", "log_start_date": "2017-02-26", "index": "default", "max_retries": "-1", "interval": "30", "start_by_shell": "false"}
2017-02-27 19:55:08,354 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:55:07,905 INFO pid=27173 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:54:44,875 INFO pid=26900 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:54:44,874 INFO pid=26900 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:54:43,869 INFO pid=26992 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:54:43,844 INFO pid=26992 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:54:40,916 INFO pid=26992 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:54:40,913 INFO pid=26992 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:54:40,305 INFO pid=26992 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:54:40,305 INFO pid=26992 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:54:40,304 INFO pid=26992 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:54:40,301 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:54:40,301 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:54:40,199 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:54:39,900 INFO pid=26900 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:54:39,899 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:54:39,748 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:54:39,739 INFO pid=26900 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:54:39,364 INFO pid=26900 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:54:39,221 INFO pid=26900 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:54:38,268 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "log_start_date": "2017-02-26", "index": "default", "interval": "30", "bucket_region": "us-east-1", "start_by_shell": "false", "max_fails": "10000", "max_retries": "-1", "host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "aws_account": "IA Dev"}
2017-02-27 19:54:38,268 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:54:37,869 INFO pid=26900 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:54:14,383 INFO pid=26482 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:54:14,383 INFO pid=26482 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:54:13,361 INFO pid=26506 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:54:13,328 INFO pid=26506 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:54:10,386 INFO pid=26506 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:54:10,381 INFO pid=26506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:54:10,036 INFO pid=26506 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:54:10,036 INFO pid=26506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:54:10,035 INFO pid=26506 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:54:10,030 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:54:10,030 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:54:09,938 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:54:09,658 INFO pid=26482 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:54:09,657 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:54:09,540 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:54:09,533 INFO pid=26482 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:54:09,299 INFO pid=26482 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:54:09,216 INFO pid=26482 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:54:08,406 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_start_date": "2017-02-26", "bucket_region": "us-east-1", "interval": "30", "bucket_name": "development-alb-private-logging", "start_by_shell": "false", "aws_account": "IA Dev", "max_retries": "-1", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "index": "default", "sourcetype": "aws:alb:accesslogs", "host": "splunkenterprise", "max_fails": "10000"}
2017-02-27 19:54:08,405 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:54:07,870 INFO pid=26482 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:53:44,772 INFO pid=26275 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:53:44,772 INFO pid=26275 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:53:43,185 INFO pid=26299 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:53:43,153 INFO pid=26299 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:53:40,240 INFO pid=26299 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:53:40,239 INFO pid=26299 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:53:39,852 INFO pid=26299 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:53:39,852 INFO pid=26299 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:53:39,852 INFO pid=26299 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:53:39,849 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:53:39,848 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:53:39,678 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:53:39,297 INFO pid=26275 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:53:39,296 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:53:39,221 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:53:39,219 INFO pid=26275 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:53:38,994 INFO pid=26275 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:53:38,957 INFO pid=26275 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:53:38,271 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_name": "development-alb-private-logging", "index": "default", "log_start_date": "2017-02-26", "log_type": "elb:accesslogs", "max_retries": "-1", "interval": "30", "sourcetype": "aws:alb:accesslogs", "host": "splunkenterprise", "max_fails": "10000", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "start_by_shell": "false", "aws_account": "IA Dev"}
2017-02-27 19:53:38,271 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:53:37,832 INFO pid=26275 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:53:15,024 INFO pid=25872 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:53:15,024 INFO pid=25872 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:53:13,407 INFO pid=25896 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:53:13,382 INFO pid=25896 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:53:10,453 INFO pid=25896 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:53:10,451 INFO pid=25896 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:53:10,096 INFO pid=25896 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:53:10,096 INFO pid=25896 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:53:10,093 INFO pid=25896 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:53:10,089 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:53:10,089 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:53:10,008 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:53:09,717 INFO pid=25872 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:53:09,716 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:53:09,580 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:53:09,578 INFO pid=25872 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:53:09,343 INFO pid=25872 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:53:09,304 INFO pid=25872 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:53:08,365 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"sourcetype": "aws:alb:accesslogs", "max_fails": "10000", "host": "splunkenterprise", "aws_account": "IA Dev", "interval": "30", "max_retries": "-1", "log_type": "elb:accesslogs", "bucket_region": "us-east-1", "host_name": "s3.amazonaws.com", "log_start_date": "2017-02-26", "index": "default", "bucket_name": "development-alb-private-logging", "start_by_shell": "false"}
2017-02-27 19:53:08,365 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:53:07,920 INFO pid=25872 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:52:44,852 INFO pid=25582 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:52:44,852 INFO pid=25582 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:52:43,000 INFO pid=25621 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:52:42,975 INFO pid=25621 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:52:40,046 INFO pid=25621 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:52:40,044 INFO pid=25621 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:52:39,715 INFO pid=25621 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:52:39,715 INFO pid=25621 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:52:39,714 INFO pid=25621 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:52:39,707 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:52:39,706 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:52:39,605 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:52:39,300 INFO pid=25582 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:52:39,298 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:52:39,215 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:52:39,203 INFO pid=25582 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:52:38,971 INFO pid=25582 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:52:38,943 INFO pid=25582 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:52:38,213 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_region": "us-east-1", "log_start_date": "2017-02-26", "sourcetype": "aws:alb:accesslogs", "index": "default", "start_by_shell": "false", "interval": "30", "aws_account": "IA Dev", "max_retries": "-1", "log_type": "elb:accesslogs", "host_name": "s3.amazonaws.com", "bucket_name": "development-alb-private-logging", "max_fails": "10000", "host": "splunkenterprise"}
2017-02-27 19:52:38,212 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:52:37,805 INFO pid=25582 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:52:14,906 INFO pid=25418 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:52:14,906 INFO pid=25418 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:52:13,129 INFO pid=25442 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:52:13,104 INFO pid=25442 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:52:10,155 INFO pid=25442 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:52:10,153 INFO pid=25442 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:52:09,870 INFO pid=25442 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:52:09,870 INFO pid=25442 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:52:09,869 INFO pid=25442 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:52:09,865 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:52:09,865 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:52:09,665 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:52:09,365 INFO pid=25418 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:52:09,363 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:52:09,278 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:52:09,276 INFO pid=25418 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:52:09,056 INFO pid=25418 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:52:09,015 INFO pid=25418 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:52:08,263 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "start_by_shell": "false", "log_start_date": "2017-02-26", "interval": "30", "aws_account": "IA Dev", "max_fails": "10000", "bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "max_retries": "-1", "index": "default", "bucket_region": "us-east-1"}
2017-02-27 19:52:08,263 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:52:07,855 INFO pid=25418 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:51:44,881 INFO pid=25259 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:51:44,881 INFO pid=25259 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:51:42,958 INFO pid=25283 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:51:42,931 INFO pid=25283 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:51:40,006 INFO pid=25283 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:51:40,004 INFO pid=25283 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:51:39,618 INFO pid=25283 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:51:39,618 INFO pid=25283 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:51:39,617 INFO pid=25283 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:51:39,615 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:51:39,615 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:51:39,515 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:51:39,212 INFO pid=25259 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:51:39,210 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:51:39,136 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:51:39,135 INFO pid=25259 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:51:38,901 INFO pid=25259 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:51:38,862 INFO pid=25259 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:51:38,269 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_name": "development-alb-private-logging", "interval": "30", "log_start_date": "2017-02-26", "sourcetype": "aws:alb:accesslogs", "bucket_region": "us-east-1", "host": "splunkenterprise", "max_fails": "10000", "start_by_shell": "false", "host_name": "s3.amazonaws.com", "max_retries": "-1", "index": "default", "aws_account": "IA Dev", "log_type": "elb:accesslogs"}
2017-02-27 19:51:38,268 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:51:37,905 INFO pid=25259 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:51:15,452 INFO pid=25095 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:51:15,452 INFO pid=25095 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:51:13,874 INFO pid=25119 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:51:13,856 INFO pid=25119 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:51:10,895 INFO pid=25119 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:51:10,893 INFO pid=25119 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:51:10,308 INFO pid=25119 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:51:10,308 INFO pid=25119 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:51:10,307 INFO pid=25119 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:51:10,305 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:51:10,304 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:51:10,213 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:51:09,854 INFO pid=25095 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:51:09,851 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:51:09,727 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:51:09,724 INFO pid=25095 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:51:09,362 INFO pid=25095 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:51:09,305 INFO pid=25095 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:51:08,351 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"index": "default", "sourcetype": "aws:alb:accesslogs", "max_fails": "10000", "host": "splunkenterprise", "bucket_name": "development-alb-private-logging", "log_type": "elb:accesslogs", "start_by_shell": "false", "interval": "30", "log_start_date": "2017-02-26", "max_retries": "-1", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "aws_account": "IA Dev"}
2017-02-27 19:51:08,351 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:51:07,989 INFO pid=25095 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:50:44,209 INFO pid=24867 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:50:44,209 INFO pid=24867 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:50:42,973 INFO pid=24891 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:50:42,929 INFO pid=24891 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:50:40,026 INFO pid=24891 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:50:40,024 INFO pid=24891 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:50:39,608 INFO pid=24891 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:50:39,608 INFO pid=24891 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:50:39,606 INFO pid=24891 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:50:39,602 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:50:39,601 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:50:39,515 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:50:39,229 INFO pid=24867 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:50:39,227 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:50:39,123 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:50:39,122 INFO pid=24867 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:50:38,890 INFO pid=24867 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:50:38,843 INFO pid=24867 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:50:38,199 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "aws_account": "IA Dev", "interval": "30", "start_by_shell": "false", "bucket_region": "us-east-1", "log_start_date": "2017-02-26", "max_fails": "10000", "max_retries": "-1", "log_type": "elb:accesslogs", "index": "default"}
2017-02-27 19:50:38,199 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:50:37,823 INFO pid=24867 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:50:14,837 INFO pid=24638 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:50:14,837 INFO pid=24638 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:50:13,794 INFO pid=24663 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:50:13,768 INFO pid=24663 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:50:10,832 INFO pid=24663 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:50:10,829 INFO pid=24663 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:50:10,456 INFO pid=24663 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:50:10,456 INFO pid=24663 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:50:10,455 INFO pid=24663 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:50:10,453 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:50:10,452 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:50:10,360 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:50:10,027 INFO pid=24638 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:50:10,025 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:50:09,923 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:50:09,921 INFO pid=24638 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:50:09,685 INFO pid=24638 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:50:09,651 INFO pid=24638 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:50:08,641 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"index": "default", "interval": "30", "host": "splunkenterprise", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "sourcetype": "aws:alb:accesslogs", "start_by_shell": "false", "max_retries": "-1", "bucket_region": "us-east-1", "log_start_date": "2017-02-26", "max_fails": "10000", "bucket_name": "development-alb-private-logging", "aws_account": "IA Dev"}
2017-02-27 19:50:08,640 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:50:07,927 INFO pid=24638 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:49:44,919 INFO pid=24480 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:49:44,918 INFO pid=24480 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:49:43,002 INFO pid=24505 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:49:42,981 INFO pid=24505 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:49:40,019 INFO pid=24505 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:49:40,018 INFO pid=24505 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:49:39,743 INFO pid=24505 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:49:39,743 INFO pid=24505 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:49:39,742 INFO pid=24505 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:49:39,739 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:49:39,739 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:49:39,649 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:49:39,328 INFO pid=24480 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:49:39,326 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:49:39,254 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:49:39,252 INFO pid=24480 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:49:39,007 INFO pid=24480 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:49:38,979 INFO pid=24480 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:49:38,238 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"interval": "30", "aws_account": "IA Dev", "log_type": "elb:accesslogs", "host": "splunkenterprise", "max_fails": "10000", "sourcetype": "aws:alb:accesslogs", "max_retries": "-1", "bucket_name": "development-alb-private-logging", "start_by_shell": "false", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "index": "default", "log_start_date": "2017-02-26"}
2017-02-27 19:49:38,238 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:49:37,814 INFO pid=24480 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:49:15,660 INFO pid=24267 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:49:15,660 INFO pid=24267 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:49:13,862 INFO pid=24307 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:49:13,839 INFO pid=24307 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:49:10,887 INFO pid=24307 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:49:10,885 INFO pid=24307 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:49:10,493 INFO pid=24307 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:49:10,493 INFO pid=24307 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:49:10,492 INFO pid=24307 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:49:10,489 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:49:10,488 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:49:10,398 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:49:10,101 INFO pid=24267 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:49:10,099 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:49:09,953 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:49:09,951 INFO pid=24267 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:49:09,630 INFO pid=24267 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:49:09,601 INFO pid=24267 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:49:08,588 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"max_retries": "-1", "aws_account": "IA Dev", "start_by_shell": "false", "bucket_name": "development-alb-private-logging", "bucket_region": "us-east-1", "log_start_date": "2017-02-26", "max_fails": "10000", "host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "index": "default", "interval": "30", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs"}

2017-02-27 19:49:08,588 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:49:07,956 INFO pid=24267 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:48:45,252 INFO pid=24109 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:48:45,252 INFO pid=24109 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:48:43,433 INFO pid=24133 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:48:43,412 INFO pid=24133 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:48:40,502 INFO pid=24133 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:48:40,494 INFO pid=24133 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:48:39,908 INFO pid=24133 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:48:39,906 INFO pid=24133 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:48:39,905 INFO pid=24133 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:48:39,902 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:48:39,901 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:48:39,807 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:48:39,413 INFO pid=24109 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:48:39,412 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:48:39,328 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:48:39,327 INFO pid=24109 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:48:39,082 INFO pid=24109 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:48:39,027 INFO pid=24109 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:48:38,211 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_type": "elb:accesslogs", "log_start_date": "2017-02-26", "bucket_region": "us-east-1", "aws_account": "IA Dev", "bucket_name": "development-alb-private-logging", "max_fails": "10000", "start_by_shell": "false", "max_retries": "-1", "index": "default", "interval": "30", "host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "host_name": "s3.amazonaws.com"}
2017-02-27 19:48:38,211 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:48:37,786 INFO pid=24109 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:48:14,797 INFO pid=23828 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:48:14,796 INFO pid=23828 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:48:12,994 INFO pid=23851 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:48:12,971 INFO pid=23851 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:48:10,024 INFO pid=23851 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:48:10,022 INFO pid=23851 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:48:09,670 INFO pid=23851 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:48:09,670 INFO pid=23851 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:48:09,669 INFO pid=23851 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:48:09,667 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:48:09,666 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:48:09,506 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:48:09,203 INFO pid=23828 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:48:09,202 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:48:09,138 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:48:09,136 INFO pid=23828 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:48:08,908 INFO pid=23828 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:48:08,880 INFO pid=23828 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:48:08,168 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"sourcetype": "aws:alb:accesslogs", "bucket_name": "development-alb-private-logging", "max_retries": "-1", "log_type": "elb:accesslogs", "interval": "30", "host_name": "s3.amazonaws.com", "host": "splunkenterprise", "aws_account": "IA Dev", "start_by_shell": "false", "bucket_region": "us-east-1", "index": "default", "log_start_date": "2017-02-26", "max_fails": "10000"}
2017-02-27 19:48:08,168 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:48:07,798 INFO pid=23828 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:47:44,784 INFO pid=23670 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:47:44,784 INFO pid=23670 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:47:43,135 INFO pid=23695 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:47:43,115 INFO pid=23695 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:47:40,157 INFO pid=23695 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:47:40,155 INFO pid=23695 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:47:39,764 INFO pid=23695 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:47:39,764 INFO pid=23695 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:47:39,763 INFO pid=23695 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:47:39,759 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:47:39,758 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:47:39,664 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:47:39,355 INFO pid=23670 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:47:39,353 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:47:39,297 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:47:39,295 INFO pid=23670 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:47:39,086 INFO pid=23670 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:47:39,023 INFO pid=23670 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:47:38,245 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"max_fails": "10000", "sourcetype": "aws:alb:accesslogs", "log_type": "elb:accesslogs", "max_retries": "-1", "interval": "30", "host": "splunkenterprise", "aws_account": "IA Dev", "index": "default", "log_start_date": "2017-02-26", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "start_by_shell": "false", "bucket_name": "development-alb-private-logging"}
2017-02-27 19:47:38,245 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:47:37,803 INFO pid=23670 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:47:15,018 INFO pid=23506 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:47:15,017 INFO pid=23506 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:47:13,244 INFO pid=23530 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:47:13,219 INFO pid=23530 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:47:10,283 INFO pid=23530 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:47:10,280 INFO pid=23530 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:47:09,767 INFO pid=23530 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:47:09,767 INFO pid=23530 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:47:09,767 INFO pid=23530 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:47:09,764 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:47:09,764 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:47:09,674 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:47:09,378 INFO pid=23506 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:47:09,377 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:47:09,317 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:47:09,314 INFO pid=23506 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:47:09,090 INFO pid=23506 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:47:09,061 INFO pid=23506 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:47:08,190 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_type": "elb:accesslogs", "log_start_date": "2017-02-26", "index": "default", "interval": "30", "bucket_region": "us-east-1", "sourcetype": "aws:alb:accesslogs", "host": "splunkenterprise", "bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "max_retries": "-1", "aws_account": "IA Dev", "start_by_shell": "false", "max_fails": "10000"}
2017-02-27 19:47:08,190 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:47:07,771 INFO pid=23506 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:46:45,391 INFO pid=23251 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:46:45,391 INFO pid=23251 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:46:43,788 INFO pid=23372 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:46:43,766 INFO pid=23372 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:46:40,818 INFO pid=23372 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:46:40,817 INFO pid=23372 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:46:40,427 INFO pid=23372 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"

2017-02-27 19:46:40,427 INFO pid=23372 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:46:40,426 INFO pid=23372 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:46:40,422 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:46:40,422 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:46:40,243 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:46:39,986 INFO pid=23251 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:46:39,984 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:46:39,856 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:46:39,850 INFO pid=23251 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:46:39,597 INFO pid=23251 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:46:39,489 INFO pid=23251 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:46:38,282 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"aws_account": "IA Dev", "log_type": "elb:accesslogs", "interval": "30", "max_fails": "10000", "host": "splunkenterprise", "start_by_shell": "false", "log_start_date": "2017-02-26", "max_retries": "-1", "bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "index": "default", "bucket_region": "us-east-1", "sourcetype": "aws:alb:accesslogs"}
2017-02-27 19:46:38,281 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:46:37,786 INFO pid=23251 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:46:15,345 INFO pid=22900 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:46:15,345 INFO pid=22900 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:46:13,720 INFO pid=22924 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:46:13,692 INFO pid=22924 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:46:10,761 INFO pid=22924 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:46:10,759 INFO pid=22924 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:46:10,170 INFO pid=22924 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:46:10,170 INFO pid=22924 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:46:10,169 INFO pid=22924 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:46:10,165 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:46:10,165 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:46:10,020 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:46:09,704 INFO pid=22900 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:46:09,702 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:46:09,583 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:46:09,582 INFO pid=22900 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:46:09,351 INFO pid=22900 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:46:09,298 INFO pid=22900 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:46:08,390 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"interval": "30", "host": "splunkenterprise", "start_by_shell": "false", "max_retries": "-1", "max_fails": "10000", "sourcetype": "aws:alb:accesslogs", "index": "default", "aws_account": "IA Dev", "bucket_name": "development-alb-private-logging", "log_type": "elb:accesslogs", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "log_start_date": "2017-02-26"}

2017-02-27 19:46:08,390 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:46:07,839 INFO pid=22900 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:45:44,883 INFO pid=22742 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:45:44,883 INFO pid=22742 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:45:43,298 INFO pid=22767 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:45:43,275 INFO pid=22767 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:45:40,318 INFO pid=22767 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:45:40,317 INFO pid=22767 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:45:39,738 INFO pid=22767 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:45:39,738 INFO pid=22767 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:45:39,737 INFO pid=22767 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:45:39,725 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:45:39,725 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:45:39,622 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:45:39,346 INFO pid=22742 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:45:39,345 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:45:39,292 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:45:39,290 INFO pid=22742 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:45:39,052 INFO pid=22742 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:45:39,001 INFO pid=22742 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:45:38,114 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"index": "default", "interval": "30", "host": "splunkenterprise", "host_name": "s3.amazonaws.com", "log_start_date": "2017-02-26", "log_type": "elb:accesslogs", "sourcetype": "aws:alb:accesslogs", "start_by_shell": "false", "max_retries": "-1", "bucket_region": "us-east-1", "max_fails": "10000", "bucket_name": "development-alb-private-logging", "aws_account": "IA Dev"}

2017-02-27 19:45:38,114 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:45:37,751 INFO pid=22742 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:45:15,716 INFO pid=22579 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:45:15,715 INFO pid=22579 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:45:13,950 INFO pid=22603 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:45:13,927 INFO pid=22603 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:45:11,000 INFO pid=22603 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:45:10,999 INFO pid=22603 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:45:10,693 INFO pid=22603 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:45:10,693 INFO pid=22603 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:45:10,691 INFO pid=22603 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:45:10,689 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:45:10,689 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:45:10,548 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:45:10,174 INFO pid=22579 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:45:10,173 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:45:10,082 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:45:10,081 INFO pid=22579 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:45:09,833 INFO pid=22579 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:45:09,734 INFO pid=22579 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:45:08,700 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_region": "us-east-1", "host": "splunkenterprise", "max_fails": "10000", "bucket_name": "development-alb-private-logging", "max_retries": "-1", "aws_account": "IA Dev", "start_by_shell": "false", "index": "default", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "interval": "30", "sourcetype": "aws:alb:accesslogs", "log_start_date": "2017-02-26"}

2017-02-27 19:45:08,700 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:45:07,940 INFO pid=22579 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:44:44,664 INFO pid=22421 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:44:44,664 INFO pid=22421 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:44:43,035 INFO pid=22445 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:44:43,006 INFO pid=22445 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:44:40,076 INFO pid=22445 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:44:40,074 INFO pid=22445 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:44:39,732 INFO pid=22445 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:44:39,731 INFO pid=22445 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:44:39,731 INFO pid=22445 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:44:39,728 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:44:39,728 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:44:39,623 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:44:39,323 INFO pid=22421 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:44:39,322 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:44:39,250 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:44:39,248 INFO pid=22421 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:44:39,021 INFO pid=22421 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:44:38,995 INFO pid=22421 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:44:38,261 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_type": "elb:accesslogs", "host": "splunkenterprise", "index": "default", "log_start_date": "2017-02-26", "bucket_region": "us-east-1", "start_by_shell": "false", "aws_account": "IA Dev", "interval": "30", "bucket_name": "development-alb-private-logging", "sourcetype": "aws:alb:accesslogs", "max_retries": "-1", "host_name": "s3.amazonaws.com", "max_fails": "10000"}

2017-02-27 19:44:38,260 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:44:37,827 INFO pid=22421 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:44:15,103 INFO pid=22255 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:44:15,103 INFO pid=22255 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:44:13,176 INFO pid=22280 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:44:13,155 INFO pid=22280 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:44:10,256 INFO pid=22280 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:44:10,255 INFO pid=22280 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:44:09,705 INFO pid=22280 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:44:09,704 INFO pid=22280 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:44:09,704 INFO pid=22280 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:44:09,701 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:44:09,701 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:44:09,656 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:44:09,342 INFO pid=22255 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:44:09,341 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:44:09,239 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:44:09,238 INFO pid=22255 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:44:09,001 INFO pid=22255 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:44:08,964 INFO pid=22255 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:44:08,181 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"max_retries": "-1", "host": "splunkenterprise", "aws_account": "IA Dev", "log_type": "elb:accesslogs", "max_fails": "10000", "log_start_date": "2017-02-26", "start_by_shell": "false", "index": "default", "bucket_region": "us-east-1", "interval": "30", "bucket_name": "development-alb-private-logging", "sourcetype": "aws:alb:accesslogs", "host_name": "s3.amazonaws.com"}

2017-02-27 19:44:08,180 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:44:07,758 INFO pid=22255 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:43:44,510 INFO pid=22081 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:43:44,510 INFO pid=22081 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:43:43,029 INFO pid=22106 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:43:43,006 INFO pid=22106 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:43:40,100 INFO pid=22106 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:43:40,098 INFO pid=22106 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:43:39,771 INFO pid=22106 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:43:39,770 INFO pid=22106 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:43:39,770 INFO pid=22106 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:43:39,767 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:43:39,766 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:43:39,675 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:43:39,345 INFO pid=22081 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:43:39,343 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:43:39,288 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:43:39,287 INFO pid=22081 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:43:39,070 INFO pid=22081 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:43:39,039 INFO pid=22081 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:43:38,199 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_start_date": "2017-02-26", "index": "default", "bucket_region": "us-east-1", "host_name": "s3.amazonaws.com", "start_by_shell": "false", "bucket_name": "development-alb-private-logging", "aws_account": "IA Dev", "sourcetype": "aws:alb:accesslogs", "max_fails": "10000", "max_retries": "-1", "log_type": "elb:accesslogs", "host": "splunkenterprise", "interval": "30"}

2017-02-27 19:43:38,199 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:43:37,810 INFO pid=22081 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:43:14,793 INFO pid=21918 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:43:14,793 INFO pid=21918 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:43:13,148 INFO pid=21942 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:43:13,128 INFO pid=21942 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:43:10,209 INFO pid=21942 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:43:10,208 INFO pid=21942 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:43:09,851 INFO pid=21942 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:43:09,850 INFO pid=21942 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:43:09,849 INFO pid=21942 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:43:09,845 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:43:09,844 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:43:09,744 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:43:09,407 INFO pid=21918 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:43:09,405 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:43:09,336 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:43:09,334 INFO pid=21918 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:43:09,065 INFO pid=21918 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:43:09,004 INFO pid=21918 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:43:08,268 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"max_fails": "10000", "bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "bucket_region": "us-east-1", "max_retries": "-1", "start_by_shell": "false", "aws_account": "IA Dev", "index": "default", "interval": "30", "host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "log_start_date": "2017-02-26"}

2017-02-27 19:43:08,267 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:43:07,850 INFO pid=21918 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:42:44,659 INFO pid=21760 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:42:44,659 INFO pid=21760 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:42:42,870 INFO pid=21783 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:42:42,848 INFO pid=21783 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:42:39,939 INFO pid=21783 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:42:39,937 INFO pid=21783 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:42:39,552 INFO pid=21783 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:42:39,552 INFO pid=21783 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:42:39,549 INFO pid=21783 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:42:39,544 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:42:39,543 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:42:39,452 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:42:39,131 INFO pid=21760 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:42:39,121 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:42:39,036 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:42:39,033 INFO pid=21760 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:42:38,742 INFO pid=21760 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:42:38,712 INFO pid=21760 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:42:38,087 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"interval": "30", "aws_account": "IA Dev", "host_name": "s3.amazonaws.com", "start_by_shell": "false", "bucket_region": "us-east-1", "host": "splunkenterprise", "max_fails": "10000", "bucket_name": "development-alb-private-logging", "sourcetype": "aws:alb:accesslogs", "log_type": "elb:accesslogs", "max_retries": "-1", "log_start_date": "2017-02-26", "index": "default"}

2017-02-27 19:42:38,086 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:42:37,780 INFO pid=21760 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:42:16,816 INFO pid=21594 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:42:16,815 INFO pid=21594 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:42:15,126 INFO pid=21619 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:42:15,085 INFO pid=21619 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:42:12,165 INFO pid=21619 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:42:12,163 INFO pid=21619 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:42:11,708 INFO pid=21619 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:42:11,707 INFO pid=21619 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:42:11,706 INFO pid=21619 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:42:11,698 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:42:11,695 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:42:11,372 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"

2017-02-27 19:42:10,100 INFO pid=21594 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:42:10,097 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:42:09,993 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:42:09,991 INFO pid=21594 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:42:08,961 INFO pid=21594 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:42:08,918 INFO pid=21594 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:42:08,161 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"start_by_shell": "false", "log_start_date": "2017-02-26", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "index": "default", "log_type": "elb:accesslogs", "max_fails": "10000", "aws_account": "IA Dev", "interval": "30", "sourcetype": "aws:alb:accesslogs", "max_retries": "-1", "bucket_name": "development-alb-private-logging", "host": "splunkenterprise"}

2017-02-27 19:42:08,161 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:42:07,747 INFO pid=21594 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:41:51,618 INFO pid=21433 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:41:51,617 INFO pid=21433 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:41:49,663 INFO pid=21459 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:41:49,646 INFO pid=21459 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:41:43,713 INFO pid=21459 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:41:43,712 INFO pid=21459 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:41:43,306 INFO pid=21459 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:41:43,306 INFO pid=21459 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:41:43,305 INFO pid=21459 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:41:43,301 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:41:43,300 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:41:42,777 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:41:40,714 INFO pid=21433 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:41:40,706 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:41:40,623 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:41:40,621 INFO pid=21433 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:41:39,002 INFO pid=21433 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:41:38,956 INFO pid=21433 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:41:38,173 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_start_date": "2017-02-26", "interval": "30", "host": "splunkenterprise", "index": "default", "start_by_shell": "false", "sourcetype": "aws:alb:accesslogs", "aws_account": "IA Dev", "log_type": "elb:accesslogs", "bucket_name": "development-alb-private-logging", "max_retries": "-1", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "max_fails": "10000"}

2017-02-27 19:41:38,172 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:41:37,790 INFO pid=21433 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:41:16,700 INFO pid=21268 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:41:16,700 INFO pid=21268 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:41:15,307 INFO pid=21294 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:41:15,289 INFO pid=21294 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:41:12,342 INFO pid=21294 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:41:12,340 INFO pid=21294 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:41:11,988 INFO pid=21294 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:41:11,988 INFO pid=21294 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:41:11,987 INFO pid=21294 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:41:11,985 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:41:11,984 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:41:11,678 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:41:10,670 INFO pid=21268 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:41:10,667 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:41:10,601 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:41:10,600 INFO pid=21268 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:41:09,132 INFO pid=21268 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:41:09,105 INFO pid=21268 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:41:08,320 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_region": "us-east-1", "sourcetype": "aws:alb:accesslogs", "host": "splunkenterprise", "index": "default", "log_start_date": "2017-02-26", "log_type": "elb:accesslogs", "max_retries": "-1", "aws_account": "IA Dev", "interval": "30", "bucket_name": "development-alb-private-logging", "max_fails": "10000", "start_by_shell": "false", "host_name": "s3.amazonaws.com"}

2017-02-27 19:41:08,320 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:41:07,848 INFO pid=21268 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:40:50,780 INFO pid=20887 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:40:50,777 INFO pid=20887 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:40:49,700 INFO pid=20961 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:40:49,676 INFO pid=20961 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:40:43,746 INFO pid=20961 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:40:43,744 INFO pid=20961 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:40:43,322 INFO pid=20961 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:40:43,322 INFO pid=20961 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:40:43,321 INFO pid=20961 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:40:43,318 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:40:43,317 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:40:42,870 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:40:40,860 INFO pid=20887 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:40:40,843 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:40:40,654 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:40:40,651 INFO pid=20887 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:40:39,193 INFO pid=20887 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:40:39,166 INFO pid=20887 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:40:38,295 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_type": "elb:accesslogs", "start_by_shell": "false", "aws_account": "IA Dev", "max_retries": "-1", "log_start_date": "2017-02-26", "bucket_region": "us-east-1", "bucket_name": "development-alb-private-logging", "index": "default", "interval": "30", "sourcetype": "aws:alb:accesslogs", "max_fails": "10000", "host": "splunkenterprise", "host_name": "s3.amazonaws.com"}

2017-02-27 19:40:38,295 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:40:37,849 INFO pid=20887 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:40:20,699 INFO pid=20610 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:40:20,698 INFO pid=20610 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:40:18,893 INFO pid=20635 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:40:18,864 INFO pid=20635 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:40:12,941 INFO pid=20635 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:40:12,938 INFO pid=20635 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:40:12,641 INFO pid=20635 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:40:12,641 INFO pid=20635 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:40:12,640 INFO pid=20635 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:40:12,638 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:40:12,637 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:40:12,124 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:40:10,373 INFO pid=20610 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:40:10,363 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:40:10,263 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:40:10,261 INFO pid=20610 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:40:08,897 INFO pid=20610 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:40:08,843 INFO pid=20610 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:40:08,157 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"host_name": "s3.amazonaws.com", "index": "default", "interval": "30", "sourcetype": "aws:alb:accesslogs", "host": "splunkenterprise", "max_fails": "10000", "log_start_date": "2017-02-26", "bucket_region": "us-east-1", "bucket_name": "development-alb-private-logging", "start_by_shell": "false", "log_type": "elb:accesslogs", "aws_account": "IA Dev", "max_retries": "-1"}

2017-02-27 19:40:08,156 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:40:07,794 INFO pid=20610 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:39:47,060 INFO pid=20339 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:39:47,060 INFO pid=20339 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:39:45,173 INFO pid=20364 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:39:45,154 INFO pid=20364 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:39:42,231 INFO pid=20364 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:39:42,228 INFO pid=20364 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:39:41,821 INFO pid=20364 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:39:41,821 INFO pid=20364 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:39:41,820 INFO pid=20364 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:39:41,817 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:39:41,816 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:39:41,535 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:39:40,753 INFO pid=20339 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:39:40,751 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:39:40,623 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:39:40,617 INFO pid=20339 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:39:39,607 INFO pid=20339 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:39:39,554 INFO pid=20339 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:39:38,447 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"index": "default", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "log_start_date": "2017-02-26", "bucket_name": "development-alb-private-logging", "host": "splunkenterprise", "max_retries": "-1", "start_by_shell": "false", "aws_account": "IA Dev", "interval": "30", "max_fails": "10000", "log_type": "elb:accesslogs", "sourcetype": "aws:alb:accesslogs"}
2017-02-27 19:39:38,446 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:39:37,875 INFO pid=20339 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"

2017-02-27 19:39:14,712 INFO pid=20048 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"

2017-02-27 19:39:14,711 INFO pid=20048 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:39:12,972 INFO pid=20094 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"

2017-02-27 19:39:12,941 INFO pid=20094 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:39:09,978 INFO pid=20094 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"

2017-02-27 19:39:09,976 INFO pid=20094 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:39:09,624 INFO pid=20094 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:39:09,623 INFO pid=20094 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:39:09,607 INFO pid=20094 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:39:09,604 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:39:09,604 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:39:09,509 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:39:09,276 INFO pid=20048 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:39:09,274 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:39:09,196 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:39:09,194 INFO pid=20048 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:39:08,978 INFO pid=20048 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:39:08,953 INFO pid=20048 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:39:08,175 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"max_retries": "-1", "interval": "30", "index": "default", "start_by_shell": "false", "max_fails": "10000", "host": "splunkenterprise", "log_type": "elb:accesslogs", "host_name": "s3.amazonaws.com", "bucket_name": "development-alb-private-logging", "aws_account": "IA Dev", "bucket_region": "us-east-1", "sourcetype": "aws:alb:accesslogs", "log_start_date": "2017-02-26"}

2017-02-27 19:39:08,174 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:39:07,723 INFO pid=20048 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
0 Karma
1 Solution

klaxdal
Contributor

Don't think ALB is supported in this version of the app ( could be wrong but pretty sure )

View solution in original post

0 Karma

nickhills
Ultra Champion

It seems your IAM user account can list the buckets, but are you sure you have granted permission to list & get bucket objects?

If my comment helps, please give it a thumbs up!
0 Karma

nikki603
Engager

I did have s3:GetObject but just to rule it out, I attached a policy to my user

{
            "Effect": "Allow",
            "Action": "*",
            "Resource": "*"
        }

Still the same. It doesn't seem to find anything after "s3 list files start"

0 Karma

klaxdal
Contributor

Don't think ALB is supported in this version of the app ( could be wrong but pretty sure )

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...