Getting Data In

Ingest sample data from EC2 AWS instance

Sherman253
New Member

Hello!

I am new to splunk and aws. I just set up splunk in a linux server in aws.  I want to now ingest sample data into AWS to forward it so I can view it in splunk. I know i need to use the universal forwarder. but how do i actually go about ingesting the data into a S3 bucket to then be forwarded to splunk.  Yes I know i can ingest sample data straight into splunk but I am trying to get real world experience to get a job in cybersecurity!

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Actually ingesting via an S3 bucket is a fairly unusual scenario. Start easy - by deploying a UF on a windows box and reading its eventlog channels. Then try ingesting data with file monitor inputs. Then you can try installing some apps with modular inputs and configuring them.

And actually, adding data is not really much of a cybersecurity task. It's more of an admin chore.

0 Karma
Get Updates on the Splunk Community!

Uncovering Multi-Account Fraud with Splunk Banking Analytics

Last month, I met with a Senior Fraud Analyst at a nationally recognized bank to discuss their recent success ...

Secure Your Future: A Deep Dive into the Compliance and Security Enhancements for the ...

What has been announced?  In the blog, “Preparing your Splunk Environment for OpensSSL3,”we announced the ...

New This Month in Splunk Observability Cloud - Synthetic Monitoring updates, UI ...

This month, we’re delivering several platform, infrastructure, application and digital experience monitoring ...