All Apps and Add-ons

Splunk_TA_AWS, not seeing data

Log_wrangler
Builder

I have my aws TA configured with an account and input. It has been running for an hour now but no data is seen in the index.

I don't see any errors in the logs, splunkd.log or for splunk_ta_aws_generic_aws_s3_input-name.log?

The bucket is huge, approx 2 TB, and I configured the input to start at 4/15/2018 and end at 8/15/2018...

Is a huge delay normal in this scenario, or is it not communicating with s3 correctly? Anything to look for in particular?

Thank you

0 Karma
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...