AWS Lightsail network traffic into Splunk

[tloney96]

Hi All,

I am attempting to get log data from an AWS Lightsail server (centOS) into Splunk. Has anyone done this and willing to shed light on the most efficient way? Lightsail is a type of EC2 and may work with the Add-On, but I am not sure that is the best way to obtain the data and am having a little difficulty setting it up. Any feedback would be appreciated. Thanks!

[dauren_akilbeko]

What logs are you trying to get? From OS or AWS itself?

[tloney96]

I am trying to get network data (traffic, IPs, etc.) from a wordpress website hosted on the AWS Lightsail server.

[dauren_akilbeko]

You probably just need to install UF on the instance and relevant add-ons such as Splunk add-on for Linux, Nginx or Apache.