The Amazon GuardDuty Addon provides knowledge objects for GuardDuty data via Amazon CloudWatch Events. This Add-on is meant to compliment the existing Splunk Add-on for Amazon Web Services (https://splunkbase.splunk.com/app/1876/). There are also two dashboards included that are dependent upon the Splunk App for AWS (https://splunkbase.splunk.com/app/1274/) and Splunk Add-on For Amazon Web Services. *** The Amazon GuardDuty Add-on is not compatible with the Splunk Add-on for Amazon Kinesis Firehose