Hi at all,
I have to configure Splunk Cloud to ingest AWS logs and it's the first time for me.
I sow the Data Manager App and I think that ingestion from AWS should be very easy, the thing that I haven't understood if there's some prerequisite in terms of apps.
In other words, before enabling AWS Data Manager input, it's better to install TA_AWS or AWS_App or both or none of them?
Then, have you some hint about indexes creation?
Have you any additional attention point?
Thank you in advance.