Splunk® App for AWS (Legacy)

Installation and Configuration Manual

Acrobat logo Download manual as PDF


On July 15, 2022, the Splunk App for AWS will reach its end of life (EOL). After this date, Splunk will no longer maintain or develop this product. Splunk App for AWS is used for both IT monitoring and security use cases because it provides dashboards for both ITOps and security teams. The IT monitoring functionality in Splunk App for AWS is migrating to a content pack in Data Integrations called the Content Pack for Amazon Web Services Dashboards and Reports. The security use case functionality in Splunk App for AWS is migrating to the new Splunk App for AWS Security Dashboards. For more about migration options, see this community post.
This documentation does not apply to the most recent version of Splunk® App for AWS (Legacy). For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Add AWS accounts for the Splunk App for AWS

When you open the Splunk App for AWS, the app displays an Overview dashboard. This dashboard had no data in it yet, because you first need to configure your AWS account(s) and enable your data inputs.

Prerequisites

Before you proceed, confirm that you have configured your AWS accounts and services in the AWS Management Console and configured sufficient IAM permissions for at least one account. If you have not yet completed those steps, go back to the Before You Deploy chapter in this manual for instructions and guidance.

Use this procedure only if you fall into one of these categories:

If you do not fall into these categories, do not use the Configure tab in the app. Instead go to your forwarder and configure your accounts and inputs using the add-on instead.

Add accounts using the Configure tab in the app

1. Open the Splunk App for AWS.

2. Click Configure on the app navigation bar. This tab is only visible to Splunk administrators.

3. On the Configure page, click Add AWS Account.

4. Enter a Friendly Name to identify the account. Use only alphanumeric characters.

5. Enter the Access Key ID for the AWS account that you want the app to use to collect data.

6. Enter the Secret Access Key for the AWS account.

7. Click Add.

If necessary, you can create multiple accounts, each configured with permissions for all or selected AWS services.

When you have configured at least one account, you can start to configure your data inputs. See Inputs overview for the Splunk App for AWS.

Last modified on 27 January, 2016
PREVIOUS
Install the Splunk App for AWS on Splunk Enterprise
  NEXT
Inputs overview for the Splunk App for AWS

This documentation applies to the following versions of Splunk® App for AWS (Legacy): 4.0.0, 4.1.0, 4.1.1


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters