All Apps and Add-ons

Splunk App for AWS: Why is the Resource Relationship Viewer panel always empty for our installation?

msudhindra
Path Finder

Hello All,

Has anyone tried using the Resource Relationship Viewer within the Splunk App for AWS ?

For some reason, this panel always comes up empty for our installation.

When trying to troubleshoot this, it seems that this particular view uses a dataset called "aws_config_relationships", which is supposed to be a TSIDX on the search head, but I am unable to locate this dataset ever being generated on our search-head.

Any insight on whats going on here would be greatly appreciated !

Thanks and Regards,
Madan Sudhindra

0 Karma
1 Solution

msudhindra
Path Finder

I had enabled the search, from the Searches, Reports and Alerts panel, however the visualization still did not load.

I finally needed to restart the Splunk Searchhead in order for the tsidx to get created.

View solution in original post

msudhindra
Path Finder

I had enabled the search, from the Searches, Reports and Alerts panel, however the visualization still did not load.

I finally needed to restart the Splunk Searchhead in order for the tsidx to get created.

View solution in original post

_d_
Splunk Employee
Splunk Employee

Have you enabled the search that generates the dataset?

  1. Go to Settings | Searches, Reports, and Alerts.

  2. Locate the search named AWS Config Relationship Generator.

  3. Click Enable.

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!