Building for the Splunk Platform

Cloudtrail Log Input doesn't exist

cchsiang2002
Explorer

Hello,

I have installed the Splunk App for AWS. Billing and instance data are successfully being generated. I am looking to pull data from Cloudtrail next. After installation, the data input for AWS Cloudtrail Log does not appear. Splunk version is 6.0.2. Is there a config I am missing?

Thanks in advance.

Tags (1)
0 Karma
1 Solution

atanasoffa
Explorer

Solved - the issue is that the Splunk DBConnect app interferes with the modular input for Cloudtrail - so the input is hidden at https://[server_name]/en-US/manager/search/data/inputs/aws-cloudtrail. The fix is to update the DBConnect app if it exists and the Cloudtrail input will appear when navigating to Data Inputs.

View solution in original post

0 Karma

atanasoffa
Explorer

Solved - the issue is that the Splunk DBConnect app interferes with the modular input for Cloudtrail - so the input is hidden at https://[server_name]/en-US/manager/search/data/inputs/aws-cloudtrail. The fix is to update the DBConnect app if it exists and the Cloudtrail input will appear when navigating to Data Inputs.

0 Karma
Get Updates on the Splunk Community!

What’s new on Splunk Lantern in August

This month’s Splunk Lantern update gives you the low-down on all of the articles we’ve published over the past ...

Welcome to the Future of Data Search & Exploration

You have more data coming at you than ever before. Over the next five years, the total amount of digital data ...

This Week's Community Digest - Splunk Community Happenings [8.3.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...