Guard duty polling using aws-add-on does not work.

Splunk Enterprise

Hi,

I'm trying to get the Guard duty log using the Splunk Add-on for AWS app.

The input method is Generic S3, and logs from cloudtrail or WAF come in well, but the Guard duty log is not coming in.

Of course, the data is in the S3 bucket.

I'm attaching the guard duty.log.

Thank you.

Get Updates on the Splunk Community!

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members! The ...

Join the Conversation