Getting Data In

Best way to use kinesis, lambda to ingest data in custom splunk index

anurbhav
Loves-to-Learn Lots

Hi,

 

What is the best way to specify the custom index in which I want to ingest data in SPLUNK.

 

1) Should I use lambda to specify the custom index and return the result to Kinesis and Kinesis will ingest the data

2) Should I use lambda directly to ingest data

3) Can kinesis specify custom index based on cloud watch group so that I can eliminate use of lambda

Labels (4)
0 Karma

Roy_9
Motivator

Following

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...