All Apps and Add-ons

Unable to use Splunk local endpoint as cloudwatch destination

karthi25
Path Finder

I am working with streaming cloudwatch logs to splunk. Splunk is my local instance with SSL enabled. I am trying to make my splunk local endpoint as destination to firehose delivery stream as follows:

alt text

and in the command line am creating cloudwatch destination

aws logs put-destination --destination-name "awslogs-destination-splunk" --target-arn "arn:aws:firehose:us-east-1:arnno:deliverystream/firehose-splunk-delivery-stream" --role-arn "arn:aws:iam::arnno:role/cw-to-kinesis-role"

but it showing me the error as follows:

An error occurred (InvalidParameterException) when calling the PutDestination op
eration: Could not deliver test message to specified destination. Check if the d
estination is valid.

What am doing wrong here.Can anyone please suggest me the solution for it.

0 Karma

toddwpiper
Engager

Hi, did you ever figure this one out? I have the same issue.

0 Karma
Get Updates on the Splunk Community!

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

Register Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and ...