All Apps and Add-ons

Splunk App for AWS: Source Type Options

rhendle
Observer

Looking for assistance with the proper format for sourcetype for sending data from AWS SQS is json format.

https://docs.splunk.com/Documentation/AddOns/released/AWS/SQS

I have tested sourcetype set to aws:sqs and json and the data in splunk looks the same. Should I actually set aws:json?

0 Karma

dhihoriya_splun
Splunk Employee
Splunk Employee

Hi @rhendle

You can use aws:sqs because as per App doc this is the default one in-app so I suggest to use the config which one is suggested by App doc.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...