All Apps and Add-ons

Splunk App for AWS: How to setup Splunk dashboards for AWS monitoring

gk2017
Engager

I am trying to setup aws dashboards on splunk light.

The directions mentioned on Step 4, http://docs.splunk.com/Documentation/SplunkLight/6.5.1612/Installation/GettingstartedSplunkAppforAWS
seem to be outdated.

I also referenced another source http://docs.splunk.com/Documentation/SplunkLight/7.0.1/Installation/GettingstartedSplunkAppforAWS#St...
but those directions don't match splunk light

Can anyone please guide how to add aws as a data source for splunk light?

0 Karma

nickhills
Ultra Champion

In the latest version of the AWS deployment, you specify your AWS credentials and inputs in the TA rather than the app.

I would agree that the Splunk Light documentation is not up to date and have reported this for correction.

In the meantime, you can proceed by using the TA to configure your inputs.
(You may need to make the TA visible in order to access the configuration pages. )
You can follow the documentation for the TA here to complete your setup.
http://docs.splunk.com/Documentation/AddOns/released/AWS/Setuptheadd-on

If my comment helps, please give it a thumbs up!
0 Karma

gneumann_splunk
Splunk Employee
Splunk Employee

Hi nickhillscpl, FYI..the Configure screen is currently not populating in Splunk Insights for AWS Cloud Monitoring AMI, or Splunk Light using App for AWS. When the user clicks Configure in the App menu bar, it displays as blank. This is due to the recent change of the configuration now being done in the Add-on for AWS, instead of the App for AWS, in Splunk Light/AMI version. (Note, navigation steps are different in Splunk Enterprise). I have updated the docs with the workaround so the user navigates to the correct place in the user interface to add their AWS accounts and configure inputs.
See http://docs.splunk.com/Documentation/SplunkLight/7.0.1/Installation/GettingstartedSplunkAppforAWS, and specifically follow Step 4. If these steps do not work, please let me know at gneumann@splunk.com. Thanks!

0 Karma

gk2017
Engager

Hi Nick, thanks for the update.
I am mainly trying to setup AWS dashboards on Splunk, so that my organization can evaluate its features.
To that extent, I got an instance of Splunk light, and selected Splunk App for AWS
I followed all the steps in this video https://www.youtube.com/watch?v=ZITShqH5z8M, to setup AWS.

The part where I am stuck is the video asks to access Splunk App for AWS, Configure screen -> Add AWS Account.
There is no Add AWS Account on Configure Screen.
The Configure Screen for Splunk App for AWS is shown as empty.

Kindly let me know how to proceed on setting up AWS dashboards in Splunk App for AWS?

gneumann_splunk
Splunk Employee
Splunk Employee

Hi @gk2017: The steps in "Step 4: In Splunk Light, add your AWS account and configure data sources" at http://docs.splunk.com/Documentation/SplunkLight/7.0.1/Installation/GettingstartedSplunkAppforAWS should work, as they are a workaround for current navigation in Splunk Light when using the App for AWS. These steps workaround the issue of the Configure screen not displaying properly. If you follow these steps, you should be able to add your AWS accounts.

Give these steps a try, and follow them closely. If they don't work for you, please email me at gneumann@splunk.com and I can help get you up and running. Thanks!

0 Karma

nikita_p
Contributor
0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...