Splunk Enterprise

Search for data in an aws s3 bucket doesn't show any data

Said75015
Explorer

Hi,

I have configured an input through aws splunk plugin to get data from a s3 bucket but when I search for it it don't show me anything.

I use the test license (I'm trying a POC with the solution)

Connection configuration is ok since I can list files in the bucket from splunk interface.

Thanks for your help

Saïd

Labels (1)
0 Karma
1 Solution

venkatasri
SplunkTrust
SplunkTrust

Hi @Said75015 

I guess you must have used AWS Add-on from splunkbase to configure the s3 inputs. You can find the issues underlying with this query accordingly you can troubleshoot.

index=_internal sourcetype=aws:s3:log ERROR

---

An upvote would be appreciated and Accept solution if this reply helps!

View solution in original post

Tags (1)

venkatasri
SplunkTrust
SplunkTrust

Hi @Said75015 

I guess you must have used AWS Add-on from splunkbase to configure the s3 inputs. You can find the issues underlying with this query accordingly you can troubleshoot.

index=_internal sourcetype=aws:s3:log ERROR

---

An upvote would be appreciated and Accept solution if this reply helps!

Tags (1)
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...

Customer success is front and center at .conf25

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news ...