Splunk App for AWS: Why is the Resource Relationship Viewer panel always empty for our installation?

[msudhindra]

Hello All,

Has anyone tried using the Resource Relationship Viewer within the Splunk App for AWS ?

For some reason, this panel always comes up empty for our installation.

When trying to troubleshoot this, it seems that this particular view uses a dataset called "aws_config_relationships", which is supposed to be a TSIDX on the search head, but I am unable to locate this dataset ever being generated on our search-head.

Any insight on whats going on here would be greatly appreciated !

Thanks and Regards,
Madan Sudhindra

[msudhindra · Accepted solution]

I had enabled the search, from the Searches, Reports and Alerts panel, however the visualization still did not load.

I finally needed to restart the Splunk Searchhead in order for the tsidx to get created.

[_d_]

Have you enabled the search that generates the dataset?

1. Go to Settings | Searches, Reports, and Alerts.

2. Locate the search named AWS Config Relationship Generator.

3. Click Enable.