Splunk Search

Current Month Estimated Billing not displaying Account ID in drop-down

nehaprasad14
New Member

Unable to get billing details in Splunk App for AWS. I have configured the billing input in Splunk Add-on apps.

Tags (1)
0 Karma

adonio
Ultra Champion

do you have billing data?
https://docs.splunk.com/Documentation/AddOns/released/AWS/ConfigureAWS#Configure_billing
try and search index = * sourcetype = aws:billing OR sourcetype = aws:billing:cur

0 Karma

nehaprasad14
New Member

Yes, I already did this step. I am getting the search results in Splunk Add-on App. But its not displaying in the same data in my Splunk App for AWS.

0 Karma

adonio
Ultra Champion

did you verify the search returned results?
what index does the data sits in?
does your user role searches that index by default?

0 Karma

nehaprasad14
New Member

Yes, this is my search criteria : index = "main" sourcetype = "aws:billing" OR sourcetype = "aws:billing:cur"
and this is the results:
4,417 events (7/1/18 12:00:00.000 AM to 7/19/18 6:21:58.000 PM)

0 Karma

nehaprasad14
New Member

But when I go to Splunk App for AWS -> Billing. It does not produces any search results nor does it populate my Account Id

0 Karma

nehaprasad14
New Member

Thanks for your help.. I figured the issue.. My AWS reports configuration was not proper.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...