Deployment Architecture

AWS logs via Kinese splunk destination Http Event Collector getting indexed but not displaying in Splunk Apps

bg10010
New Member

I have AWS cloudtrail, vpc flow logs and cloudwatch logs being indexed and are searchable in splunk via kinesis firehose->splunk destination-> HTTP Event collector->index but the splunk app for aws does not display any data

How do you configure the splunk app for aws to use this splunk recommended input architecture and display AWS log data?

same question for Splunk Enterprise, or Splunk Enterprise Security no show data but a index="aws_vpc_flow_logs" shows all logs?

https://www.splunk.com/blog/2018/01/12/power-data-ingestion-into-splunk-using-amazon-kinesis-data-fi...

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Changes to Splunk Instructor-Led Training Completion Criteria

We’re excited to share an update to our instructor-led training program that enhances the learning experience ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

❄️ Welcome the new year with our January lineup of Community Office Hours, Tech Talks, and Webinars! 🎉 ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...