Splunk® App for AWS (Legacy)

Installation and Configuration Manual

On July 15, 2022, the Splunk App for AWS will reach its end of life (EOL). After this date, Splunk will no longer maintain or develop this product. Splunk App for AWS is used for both IT monitoring and security use cases because it provides dashboards for both ITOps and security teams. The IT monitoring functionality in Splunk App for AWS is migrating to a content pack in Data Integrations called the Content Pack for Amazon Web Services Dashboards and Reports. The security use case functionality in Splunk App for AWS is migrating to the new Splunk App for AWS Security Dashboards. For more about migration options, see this community post.
This documentation does not apply to the most recent version of Splunk® App for AWS (Legacy). For documentation on the most recent version, go to the latest release.

Add a Billing input for the Splunk App for AWS

Create a Billing input to gather monthly billing reports for your AWS account.

Prerequisites

Before you can successfully configure a Billing input, you need to:

1. Set up AWS to produce monthly cost allocation reports and place them in a dedicated S3 bucket. If you have not already done this, see "Configure your AWS services for the Splunk App for AWS" in this manual.

2. Make sure that the account friendly name you use to configure this input corresponds to an AWS Account Access Key ID that has the necessary permissions to gather this data. If you have not already done this, see "Configure your AWS permissions for the Splunk App for AWS" in this manual.

Add a new Billing input

1. In the app, click Configure in the app navigation bar.

2. Under Data Sources, in the Billing box, click Set up.

3. Select the friendly name of the AWS Account that you want to use to collect billing report data. If you have not yet configured the account you need, click Add New Account to configure one now.

4. Under S3 Bucket for monthly cost allocation reports, select the name of the S3 bucket that contains your monthly cost allocation reports.

5. Click Add to save and enable this data input.

When you create the data input, the Splunk App for AWS immediately begins collecting any historical monthly cost allocation reports that it finds in the S3 bucket. Once per day, the app checks again for any new reports that have become available. The app collects a new copy of the current month's report once per day until AWS finalizes that report.

Edit or delete a Billing input

You can view, edit, or delete your existing Billing inputs from the Billing Inputs screen.

1. In the app, click Configure in the app navigation bar.

2. Under Data Sources, in the Billing box, click the link that tells you how many inputs you currently have configured for Billing.

3. The Billing screen displays a list of Billing inputs, organized by the account friendly name used to create the input.

4. From here, you can click the account names to open the individual inputs to edit them, or you can delete an input by clicking the trash can icon.

Last modified on 17 August, 2018
Add a VPC Flow Logs input for the Splunk App for AWS   Add an S3 input for the Splunk App for AWS

This documentation applies to the following versions of Splunk® App for AWS (Legacy): 4.0.0


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters