I have cloudtrail logs for around 20 AWS accounts that I want to pull into Splunk. I'm using Splunk Web. The way I'm doing this is to create a single bucket to store the cloudtrail logs and then a separate trail, sns topic, and sqs queue for each region in each account. In Splunk, I create an input for each account and then add the sqs queue for each region to the input. That way I pull in separate SQS queues but they are still under one input. In total, I'll have around 20 inputs for AWS if I do it this way. Should be this be fine in Splunk Web? ... View more