Splunk App for AWS: Has anyone managed to get the S3-Data Event Dashboard working?

[klaxdal]

Has anyone managed to get the S3-Data Event Dashboard working ? I have all the other Dashboards, Searches and Alerts functioning great.

If yes - let me know what magical incantations I require ....

Splunk 6.5.1 ( CentOS )
Splunk App for AWS 5.0

[pchen_splunk · Accepted solution]

To enable "S3 data Event Dashboard", you need to enable it in your cloudtrail policy. It's new feature in AWS re.event.

[klaxdal]

Works great !~ Thanks

[klaxdal]

Thanks . Willing to bet I am not the only one with this issue 😉