Cloudtrail Log Input doesn't exist

[cchsiang2002]

Hello,

I have installed the Splunk App for AWS. Billing and instance data are successfully being generated. I am looking to pull data from Cloudtrail next. After installation, the data input for AWS Cloudtrail Log does not appear. Splunk version is 6.0.2. Is there a config I am missing?

Thanks in advance.

[atanasoffa · Accepted solution]

Solved - the issue is that the Splunk DBConnect app interferes with the modular input for Cloudtrail - so the input is hidden at https://[server_name]/en-US/manager/search/data/inputs/aws-cloudtrail. The fix is to update the DBConnect app if it exists and the Cloudtrail input will appear when navigating to Data Inputs.