How to send aws eventbridge events to a specific index on splunk cloud

[Pavan0411]

We have been trying to ingest aws eventbridge events to splunk cloud using API destination partners provided by aws but when are trying to ingest the data using the url https://SPLUNK_HEC_ENDPOINT:optional_port/services/collector/raw. The data has been ingested to the index="main" index. but we need to ingest data to a different index can someone help how this can be performed

[gcusello]

Hi @Pavan0411,

which Add-on are you using for this?

If you're using Data Manager or Splunk Add-On for AWS Services, you can configure the destination index for each kind of data source.

Ciao.

Giuseppe

[Pavan0411]

Hi @gcusello 

we have been using Splunk Add-On for AWS Services can you please help how to configure the destination index for each kind of data source.

[gcusello]

Hi @Pavan0411,

using the Splunk Add-On for AWS services, in the inputs definition, you can set up the destination index of each input.

Ciao.

Giuseppe