I just deployed the Splunk App for AWS, and immediately, we noticed that the Splunk Addon for AWS is not pulling in all the EBS volumes information from AWS.
The discrepancy is rather large as well, with us having over 400 EBS volumes, while Splunk reports only 30 odd volumes.
Can someone please help me figure out what is going on here ?
Are your EBS volumes in a single AWS region or they are in multi regions? If they are in more than one regions, then you have to configure AWS Config for each region in the AWS App.
Let me know if it solves your question.