Migration guide for the Splunk App for AWS

Migration from Splunk App for AWS 3.0.0 for Splunk Cloud

Note: If you were using on-premises forwarders for data collection, review the migration notes in the next section as well, as they may apply to you.

Migration from Splunk App for AWS 3.0.0 for on-premises, single-server Splunk Enterprise

If you were using the Splunk App for AWS v3.0.0 on your on-premises deployment of Splunk Enterprise together with the Splunk Add-on for Amazon Web Services, be aware of the following differences in functionality:

• The Splunk App for AWS v3.0.0 no longer defines indexes.

Note: If you defined your inputs in the context of the Splunk App for AWS rather than in the context of the Splunk Add-on for Amazon Web Services, then deleting the old app would also delete your input configurations. To save your input configurations, copy the contents of your local/inputs.conf from the SplunkAppforAWS folder to $SPLUNK_HOME/etc/apps/Splunk_TA_aws/local/inputs.conf, where they can be discovered by the new app.

Migration from Splunk App for AWS 3.0.0 for on-premises, distributed deployment Splunk Enterprise

If you were using the Splunk App for AWS v3.0.0 on your on-premises distributed deployment of Splunk Enterprise, be aware of the following differences in functionality:

• The Splunk App for AWS v3.0.0 now offers the ability to manage the configuration of your AWS accounts and inputs via the app UI on your search head, so you can manage your accounts and inputs from within the app rather than configuring inputs on your heavy forwarders using the Splunk Add-on for Amazon Web Services. See "Install on a distributed deployment" in the Installation and Configuration Manual for details of the new distributed deployment instructions.
• The Splunk App for AWS v3.0.0 no longer defines indexes. All data goes to the main index by default.

Note: If you defined your inputs in the context of the Splunk App for AWS rather than in the context of the Splunk Add-on for Amazon Web Services, then deleting the old app would also delete your input configurations. To save your input configurations, copy the contents of your local/inputs.conf from the SplunkAppforAWS folder to $SPLUNK_HOME/etc/apps/Splunk_TA_aws/local/inputs.conf, where they can be discovered by the new app.

Migration from the Splunk Add-on for Amazon Web Services to the Splunk App for AWS

If you were using the Splunk Add-on for Amazon Web Services and are now using the Splunk App for AWS for the first time, be aware of the following differences in functionality: