When I try running the Splunk For AWS app I get the following error:
Splunk cannot find the "AWSCloudTrail-overview" view.
As far as I know the aws.conf is configured correctly and my Cloudtrail bucket is configured correctly. What am I missing?
Nilesh, Thanks for your response. I tried setting the Data Inputs section but nothing there shows up by the name of CloudTrail and the instructions are not specific as to whether I should create one by that name and if so what kind of input (TCP, UDP, file,etc...)