Getting Data In

Ingest sample data from EC2 AWS instance

Sherman253
New Member

Hello!

I am new to splunk and aws. I just set up splunk in a linux server in aws.  I want to now ingest sample data into AWS to forward it so I can view it in splunk. I know i need to use the universal forwarder. but how do i actually go about ingesting the data into a S3 bucket to then be forwarded to splunk.  Yes I know i can ingest sample data straight into splunk but I am trying to get real world experience to get a job in cybersecurity!

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Actually ingesting via an S3 bucket is a fairly unusual scenario. Start easy - by deploying a UF on a windows box and reading its eventlog channels. Then try ingesting data with file monitor inputs. Then you can try installing some apps with modular inputs and configuring them.

And actually, adding data is not really much of a cybersecurity task. It's more of an admin chore.

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...