Splunk® App for AWS (Legacy)

Release Notes

On July 15, 2022, the Splunk App for AWS will reach its end of life (EOL). After this date, Splunk will no longer maintain or develop this product. Splunk App for AWS is used for both IT monitoring and security use cases because it provides dashboards for both ITOps and security teams. The IT monitoring functionality in Splunk App for AWS is migrating to a content pack in Data Integrations called the Content Pack for Amazon Web Services Dashboards and Reports. The security use case functionality in Splunk App for AWS is migrating to the new Splunk App for AWS Security Dashboards. For more about migration options, see this community post.
This documentation does not apply to the most recent version of Splunk® App for AWS (Legacy). For documentation on the most recent version, go to the latest release.

Known issues for the Splunk App for AWS

Date filed Defect number Description
2016-05-09 AWSAPP-910
Lookup file unauthorized_errorCode.csv is outdated, causing incorrect unauthorized event counts in Security Overview and IAM Activity dashboards
2016-05-03 AWSAPP-881
Total number of IAM user/group/policies is not correct
2016-04-24 AWSAPP-810
Enhancement: Instances name disappear after switching region in Individual EC2 instance dashboard
2016-03-07 AWSAPP-699
Wildcard option should be removed if user specifies customized option in CloudWatch input
2016-02-19 AWSAPP-672
When dashboard panels depend on data from a data source that is not collected, they show 0 but should instead show N/A.
2016-01-13 AWSAPP-568
AWS lookups aren't populated when the add-on is on a separate instance than the app.
2015-09-09 AWSAPP-385
Selecting all regions and all services in CloudWatch input results in some invalid tasks.
2015-08-27 AWSAPP-365
Old checkpointer will be invalid if user delete input and add it back
2015-08-24 AWSAPP-353
Old data input with different customized setting will still be merged together
2015-08-20 AWSAPP-348
Old Cloudwatch data can't be shown in App after upgrade TA
2015-08-20 AWSAPP-344
The list of account id filter of every page should come from config data but not aws account configured on that search head
Workaround: Workaround: In a complex distributed environment, do not use the remote target connection script to link individual search heads to individual forwarders.
2015-08-19 AWSAPP-336
Need prompt or hint to tell user set AWS config to avoid no description data for usage dashboard
2015-08-18 AWSAPP-302
VPC Flow Logs - Traffic Analysis dashboard shows weird charts for low-volume VPC flow data
2015-08-13 AWSAPP-244
UI Enhancement: Use combo box for user to enter share S3 bucket for billing
2015-07-31 AWSAPP-159
VPC Flow Log log group selection should support multiselect
Last modified on 24 May, 2016
New features for the Splunk App for AWS   Credits for the Splunk App for AWS

This documentation applies to the following versions of Splunk® App for AWS (Legacy): 4.0.0


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters