Getting Data In

Is it possible to pull in flow logs from an S3 bucket?

bsplunkj
Engager

Is it possible to pull in flow logs from an S3 bucket? The IAM role has been created but I'm not sure the data is being retrieved/parsed accurately. There was no input option for S3 when using the AWS add-on to pull in VPC flow logs(Only Kinesis or Cloudwatch). Can the input be configured manually or do we have to change where the vpc flow logs are stored? 

Labels (1)
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...