Splunk Enterprise

Guard duty polling using aws-add-on does not work.

KwonTaeHoon
Path Finder

20240829_172747.jpg

 

Hi,

I'm trying to get the Guard duty log using the Splunk Add-on for AWS app.

The input method is Generic S3, and logs from cloudtrail or WAF come in well, but the Guard duty log is not coming in.

Of course, the data is in the S3 bucket.

I'm attaching the guard duty.log.

 

Thank you.

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...