Lookups for the Splunk App for AWS

The Splunk App for AWS includes lookups that map data from AWS to support dashboard displays. The lookup files are located in $SPLUNK_HOME/etc/apps/splunk_app_aws/lookups.

Filename	Description
all_eventName.csv	Maps IAM event names to an alert level and boolean for notable event status.
cn_price.csv	Maps instance_type to region, instance_type, region, on_demand_hourly, reserved_one_all_yearly, reserved_one_partial_yearly, reserved_one_partial_hourly
price.csv	Maps instance_type to region, instance_type, region, on_demand_hourly, reserved_one_all_yearly, reserved_one_partial_yearly, reserved_one_partial_hourly
regions.csv	Maps AWS region strings to latitude and longitude calculations and friendly names.
resource_timeline_services.csv	Maps serviceID to serviceName
unauthorized_errorCode.csv	Maps four variations on unauthorized error strings to a boolean value.
well_known_ports.csv	Maps name to port, name