Splunk Enterprise

New Splunk Light Cloud setup - how to auto configure data inputs

New Member

Hi, we are setting up a new Splunk Light Cloud based solution to push logs from AWS Elastic Beanstalk environment. I'm following steps here:

This works well. Now my concern is that with Elastic beanstalk it's common to terminate / restart EC2 instances. Does that mean I have to add data inputs in the Splunk Light Cloud dashboard (step 6 above) manually every time?

I have setup Universal Forwarder on beanstalk using ebextensions, so that every time a new EC2 instances is started, the UF is configured appropriately. It is setup as deployment client that pushes data to the splunk light cloud instance. How can I automate the step of adding new data inputs to the Splunk Light cloud?

Tags (1)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.