Unable to get billing details in Splunk App for AWS. I have configured the billing input in Splunk Add-on apps.
do you have billing data?
https://docs.splunk.com/Documentation/AddOns/released/AWS/ConfigureAWS#Configure_billing
try and search index = * sourcetype = aws:billing OR sourcetype = aws:billing:cur
Yes, I already did this step. I am getting the search results in Splunk Add-on App. But its not displaying in the same data in my Splunk App for AWS.
did you verify the search returned results?
what index does the data sits in?
does your user role searches that index by default?
Yes, this is my search criteria : index = "main" sourcetype = "aws:billing" OR sourcetype = "aws:billing:cur"
and this is the results:
4,417 events (7/1/18 12:00:00.000 AM to 7/19/18 6:21:58.000 PM)
But when I go to Splunk App for AWS -> Billing. It does not produces any search results nor does it populate my Account Id
Thanks for your help.. I figured the issue.. My AWS reports configuration was not proper.