AWS Splunk Usescases- What are AWS sourcetype details and which are required for security perspective?

[cybersej]

Hi Splunkers,

I will planning entegration splunk on our aws envirement but I m beginner on aws so please could you help me about AWS sourcetype details and let me know which are required for security perspective ? And if u have usescases about security please share with me.

[venkatasri]

@cybersej 

Another great place to find AWS use cases - https://research.splunk.com/ , search AWS you will find already curated security detection details!

---

Srikanth Yarlagadda

[venkatasri]

@cybersej 

Perhaps you could start with this list to get an understanding! - https://docs.splunk.com/Documentation/AddOns/released/AWS/DataTypes

If you are not going to use AWS add-on for ingestion of logs the will be different.

--

Srikanth Yarlagadda