All Apps and Add-ons

Why does the Splunk app for AWS Cloud's configure section does not have a way to add AWS account information?

GK2018
New Member

I am trying out Splunk Light (cloud version). I downloaded and installed "Splunk app for aws" on Splunk Light (cloud version).

I want to use Splunk app for aws to monitor my aws instances. For that reason, I want to add my aws account to Splunk app for aws, but when I go to configure section of "Splunk app for aws" I don't see a place/section to add aws account information.

In Splunk Light, go to the App for AWS page and click Configure.
b. Under Accounts, click Add AWS Account.

The step b is not available

Please guide.

0 Karma

amiracle
Splunk Employee
Splunk Employee

If you have the AMI in your AWS deployment, then you can attach an EC2 role to your AMI. Here are the steps to accomplish this:
1) Create the Splunk Policy using this documentation: http://docs.splunk.com/Documentation/AddOns/released/AWS/ConfigureAWSpermissions Call it "SplunkPolicy"
2) Open IAM-> Click on Roles -> click on Create Role -> (Under AWS Service) click on EC2 then click on Next:Permissions
3) Search for your SplunkPolicy that you just created and select it using the checkbox; and click "Next:Review"
4) Name the role, "SplunkEC2Role" and click Create Role
5) Under the EC2 Instances dashboard, click on the Instances link.
6) Select your instance, then click Actions -> Instance Settings -> Attach/Replace IAM role and select the EC2 policy you just created.

This will allow the Add-on to auto discover the policy and you should be able to use this role to start collecting data.

0 Karma

andrewb_splunk
Splunk Employee
Splunk Employee

I don't have access to a Splunk Light Cloud Service instance to know if it differs, but as a starting point have you reviewed the documentation for integrating the on premises version of Splunk Light with the Splunk App for AWS?
http://docs.splunk.com/Documentation/SplunkLight/7.0.2/Installation/GettingstartedSplunkAppforAWS

0 Karma

GK2018
New Member

Yes, I reviewed the steps http://docs.splunk.com/Documentation/SplunkLight/6.5.1612/Installation/GettingstartedSplunkAppforAWS.
The steps mention the steps
1. Add your AWS account to your Splunk Light instance.
a. In Splunk Light, go to the App for AWS page and click Configure.
b. Under Accounts, click Add AWS Account.

I could get as far as Step a. Step b is not available in Splunk App for AWS

0 Karma

andrewb_splunk
Splunk Employee
Splunk Employee

Which version of Splunk Light Cloud Service are you using? If 7.0.x, be sure to use the documentation for that version. Your doc link above points to version 6.5.1612.

The link that I provided in my first reply points to the 7.0.x docs. They have some additional information, in particular for step 4 of the process.

0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

How I Instrumented a Rust Application Without Knowing Rust

As a technical writer, I often have to edit or create code snippets for Splunk's distributions of ...