Splunk Enterprise and cloudwatch log data- How do ...

jcorcoran508 · ‎09-16-2022

I inherited splunk enterprise installed on ec2 instances. We have cloud watch sending log data to our splunk - how do I get that data feed into an index. (not indexers)

so confused.

richgalloway · ‎09-16-2022

Indexers do indexing. The only way to get data into an index is by sending it to an indexer.

What problem are trying to solve?

---
If this reply helps you, Karma would be appreciated.

Splunk Enterprise and cloudwatch log data- How do I get data into an index?

configuration

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

Splunk Answers Content Calendar, July Edition I

Are you a member of the Splunk Community?

Splunk Enterprise and cloudwatch log data- How do I get data into an index?

configuration

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

Splunk Answers Content Calendar, July Edition I