[AWS Trumpet] Only partial CloudTrail logs compare...

Getting Data In

I am using the https://github.com/splunk/splunk-aws-project-trumpet to get AWS logs in, I am facing an issue though with only partial CloudTrail logs compared to the AWS TA. Any suggestions?

On the CloudFormation template does this effectively only collect this event pattern?

EventPattern":{
"detail-type":[
"AWS API Call via CloudTrail",
"AWS Console Sign In via CloudTrail"

Get Updates on the Splunk Community!

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

[AWS Trumpet] Only partial CloudTrail logs compared to the AWS Add-on?