About jpbaker22

jpbaker22 · ‎10-25-2017

I downvoted this post because did not address question

jpbaker22 · ‎05-23-2017

@rarsan_splunk I am curious if you are sending the ALB log unzipped to the HEC as raw and letting the events in the file get indexed that way, or using the lambda to send each line as a log event to the HEC.

Posts	2
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎01-23-2014

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

Re: HTTP Event Collector: automatic sourcetype det...

Re: Splunk Add-on for Amazon Web Services: Why are...