How to read cloudtrail logs from an s3 bucket?

[dc18]

I know there is Splunk Add-on for AWS, but I heard there is a simpler and easier way to read the buckets directly without using that Add-on.

Is that true?

[dc18]

thanks

[VatsalJagani]

@dc18 - If you are on Splunk Cloud try Data Manager - https://docs.splunk.com/Documentation/DM/1.8.3/User/AWSAbout , see if it can help.

If not Splunk Add-on for AWS would be your best bet.

I hope this helps!!