Splunk® App for AWS (Legacy)

Installation and Configuration Manual

On July 15, 2022, the Splunk App for AWS will reach its end of life (EOL). After this date, Splunk will no longer maintain or develop this product. Splunk App for AWS is used for both IT monitoring and security use cases because it provides dashboards for both ITOps and security teams. The IT monitoring functionality in Splunk App for AWS is migrating to a content pack in Data Integrations called the Content Pack for Amazon Web Services Dashboards and Reports. The security use case functionality in Splunk App for AWS is migrating to the new Splunk App for AWS Security Dashboards. For more about migration options, see this community post.
This documentation does not apply to the most recent version of Splunk® App for AWS (Legacy). For documentation on the most recent version, go to the latest release.

Install the Splunk App for AWS on Splunk Cloud

This topic covers how to install the Splunk App for AWS on Splunk Cloud. Looking for Splunk Enterprise instructions? See Install the Splunk App for AWS on Splunk Enterprise.

The Splunk App for AWS on Splunk Cloud may already be installed on your Splunk Cloud instance. Follow the instructions below to check if you have it installed, upgrade or obtain the files you need, or find out how to get assistance from support to install or upgrade.

Follow the instructions in the section that matches your Splunk Cloud URL:

URLs with the pattern https://prd-*.cloud.splunk.com

1. In Splunk Cloud, click the Splunk > icon in the upper left to go to the home screen.

2. Scroll through the apps listed in the left navigation bar to see if Splunk App for AWS is listed.

  • If you see this app icon, the app is installed and enabled. Go to Step 4.

AWSappicon.png

  • If you see this blue icon, you have an old, unsupported version of the app. You must install the new one. Go to Step 5.

SplunkAppforAWS-blue.png

  • If you do not see either of the icons, go to step 3.

3. If no version of the app appears in the left navigation bar, click the gear icon next to Apps at the top of the navigation bar to open the Manage Apps page.

4. Check the version of the Splunk App for AWS in your list of installed apps. The latest version has the folder name splunk_app_aws and the version number 4.1.0.

  • If you see this version, click Enable under the Status column if it is not already enabled. Go step 7.
  • If you see version 4.0.0, click Upgrade. Follow the wizard to install the latest version, then go to step 7.
  • If you do not see either version 4.1.0 or version 4.0.0 version listed, go to Step 5.

5. If you do not have the correct version of the Splunk App for AWS in your app list, click Browse more apps.

6. In the search bar, enter AWS.

a. Look for Splunk App for AWS in the results.
b. Click Install free.
c. Follow the wizard to install the app.

7. Verify that the Splunk Add-on for AWS appears in the app list on your Manage Apps page. You need both the app and the add-on installed. If the add-on appears in the list, check the version number.

  • If the version number is 3.0.0 or later, you have a supported version. If the add-on is disabled, click Enable under the Status column to enable it. Go to step 10.
  • If the version number is anything less than 3.0.0, click Upgrade. Follow the wizard to install the latest version. Then, go to step 10.
  • If you do not have the Splunk Add-on for AWS listed at all, go to Step 8.

8. If you have verified that you do not currently have the Splunk Add-on for AWS in your app list, click Browse more apps.

9. In the search bar, enter AWS.

a. Look for Splunk Add-on for AWS in the results.
b. Click Install free.
c. Follow the wizard to install the add-on.

10. If you have been using a community-supported version (3.X or earlier) of the Splunk App for AWS, see Migrating from a previous version of the Splunk App for AWS for information about important changes in version 4.X. If you are not migrating from a previous version, you can proceed directly to Add AWS accounts for the Splunk App for AWS.

URLs with the pattern https://*.splunkcloud.com

1. In Splunk Cloud, click the Splunk > icon in the upper left corner to go to the home screen.

2. Scroll through the apps listed in the left nav to see if Splunk App for AWS is listed there.

  • If you see this app icon, the app is installed and enabled. Go to step 3.

AWSappicon.png

  • If, instead, you see a blue icon for the Splunk App for AWS, you have an old, unsupported version of the app and you need to install the new one. Go to step 4.

SplunkAppforAWS-blue.png

  • If you see neither icon, you do not have the app installed. Go to step 4.

3. Launch the app, then go to Support & Services > About to check the version of the app, which is listed at the bottom of the window.

  • If your app version is 4.0.0, you need to upgrade to 4.1.0. Go to step 4.
  • If your app version is 4.1.0, you have the latest version. Go to step 5.

4. If either the app is not installed or you have an old version, contact support for assistance. Support will install the correct version of the app and its dependencies, and assist you with any migration tasks, if they are necessary.

5. If you have previously been using an unsupported version of the app (3.X or earlier), see Migrating from an unsupported version of the Splunk App for AWS for information about important changes in version 4.X. If you are not migrating from a 3.X or earlier version, you can proceed directly to configure accounts for the app.

Last modified on 25 February, 2016
Installing the Splunk App for AWS   Install the Splunk App for AWS on Splunk Enterprise

This documentation applies to the following versions of Splunk® App for AWS (Legacy): 4.1.0

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters