Deployment Architecture

AWS logs via Kinese splunk destination Http Event Collector getting indexed but not displaying in Splunk Apps

bg10010
New Member

I have AWS cloudtrail, vpc flow logs and cloudwatch logs being indexed and are searchable in splunk via kinesis firehose->splunk destination-> HTTP Event collector->index but the splunk app for aws does not display any data

How do you configure the splunk app for aws to use this splunk recommended input architecture and display AWS log data?

same question for Splunk Enterprise, or Splunk Enterprise Security no show data but a index="aws_vpc_flow_logs" shows all logs?

https://www.splunk.com/blog/2018/01/12/power-data-ingestion-into-splunk-using-amazon-kinesis-data-fi...

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...