Getting Data In

How to index data from AWS into Splunk?

duddukurimd
New Member

We want to move files from Amazon s3 to Splunk server (ex: /opt/splunk/logs ) continuously and display those details in Splunk dynamically.

How can we move files from Amazon s3 bucket to Splunk? any suggestion on we can handle this?

0 Karma

FrankVl
Ultra Champion

I would suggest taking a look at the Splunk Add-on for AWS, which supports collecting data from S3: https://splunkbase.splunk.com/app/1876/

Alternatively you could look at creating a scripted input that uses the aws cli library to pull data from s3, store it in /opt/splunk/logs and then process it from there.

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...