Deployment Architecture

AWS logs via Kinese splunk destination Http Event Collector getting indexed but not displaying in Splunk Apps

bg10010
New Member

I have AWS cloudtrail, vpc flow logs and cloudwatch logs being indexed and are searchable in splunk via kinesis firehose->splunk destination-> HTTP Event collector->index but the splunk app for aws does not display any data

How do you configure the splunk app for aws to use this splunk recommended input architecture and display AWS log data?

same question for Splunk Enterprise, or Splunk Enterprise Security no show data but a index="aws_vpc_flow_logs" shows all logs?

https://www.splunk.com/blog/2018/01/12/power-data-ingestion-into-splunk-using-amazon-kinesis-data-fi...

Tags (1)
0 Karma
Get Updates on the Splunk Community!

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...