All Apps and Add-ons

Unable to use Splunk local endpoint as cloudwatch destination

karthi25
Path Finder

I am working with streaming cloudwatch logs to splunk. Splunk is my local instance with SSL enabled. I am trying to make my splunk local endpoint as destination to firehose delivery stream as follows:

alt text

and in the command line am creating cloudwatch destination

aws logs put-destination --destination-name "awslogs-destination-splunk" --target-arn "arn:aws:firehose:us-east-1:arnno:deliverystream/firehose-splunk-delivery-stream" --role-arn "arn:aws:iam::arnno:role/cw-to-kinesis-role"

but it showing me the error as follows:

An error occurred (InvalidParameterException) when calling the PutDestination op
eration: Could not deliver test message to specified destination. Check if the d
estination is valid.

What am doing wrong here.Can anyone please suggest me the solution for it.

0 Karma

toddwpiper
Engager

Hi, did you ever figure this one out? I have the same issue.

0 Karma
Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...