sending data from s3 to splunk

[snehal]

Hi , i am sending aws s3 data through aws TA into splunk.In start data is indexing properly after 2 day,stops the indexing of data.In internal logs ,I am getting following error.(expired token).any help will be appreciated.image (3).png

[aasabatini]

Hi @snehal 

did you try to generate a new key from aws consolle?

[snehal]

S3 buckets are on client side.we don't have access..is any other condition in splunk , that we got this error?

[aasabatini]

Hi @snehal 

generally when you this error try to repeat the configuration

in case you need anew token you must access on the aws console

https://docs.splunk.com/Documentation/AddOns/released/AWS/Troubleshooting 

Regards

Ale