Splunk Enterprise

Splunk App for AWS - no accounts in configure tab

justingschumach
New Member

This is a fresh install of Splunk Lite, and the AWS App for Splunk (latest of both as of today).
It is running on an EC2 ubuntu instance with an EC2 role that (for the purposes of testing) has Administrator level access.
I have added .aws/config credentials and environment variables for access and secret keys. I can use aws cli without issue to access all the AWS services.

After installing the AWS App for Splunk, I did not get any data at all in any of the dashboards. Looking at the documentation, it suggested I go to the Configure tab to modify users. I do not see any user related information there, only Billing.

I'm fairly new to Splunk, and apologize if this is a simple question. I didn't see anything posted that answered the question as yet.

Thank you kindly for your help.

Labels (3)
Tags (1)
0 Karma

justingschumach
New Member

I would appreciate any help with this. I would like to use Splunk, but can't until I can resolve this.

I have also tried the same steps as above on a Debian linux EC2 instance with Enterprise and could not get any data with the AWS App for Splunk plugin there either.

I don't see anything that helped me in the logs in $Splunkhome/var/log/splunk/*

Many thanks.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...