Splunk® App for AWS (EOL)

Installation and Configuration Manual

On July 15, 2022, the Splunk App for AWS will reach its end of life (EOL). After this date, Splunk will no longer maintain or develop this product. Splunk App for AWS is used for both IT monitoring and security use cases because it provides dashboards for both ITOps and security teams. The IT monitoring functionality in Splunk App for AWS is migrating to a content pack in Data Integrations called the Content Pack for Amazon Web Services Dashboards and Reports. The security use case functionality in Splunk App for AWS is migrating to the new Splunk App for AWS Security Dashboards. For more about migration options, see this community post.
This documentation does not apply to the most recent version of Splunk® App for AWS (EOL). For documentation on the most recent version, go to the latest release.

Upgrade the Splunk App for AWS

When you upgrade from a previous version to the 5.1.0 version of the Splunk App for AWS, be aware of the following changes.

  • This version of the app requires Splunk Add-on for AWS 4.4.0 or later.
  • The Topology and EC2 Insights, and Insights Overview dashboards require the use of the Python for Scientific Computing libraries to be fully functional.

Upgrade from version 5.0.x to 5.1.0

Perform an in-place upgrade, no additional configuration steps required.

Upgrade from version 4.1.0 to 5.1.0

Perform an in-place upgrade. If you use a non-clustered distributed Splunk deployment, you do not need to perform any additional upgrade activity. If you use a clustered distributed Splunk deployment, you need to perform some additional steps:

  • Configure the search head tier to directly forward data to the indexer tier.
  • Distribute the summary index configuration bundle across clustered indexers.

For detailed instructions, see Install in a clustered distributed environment.

Upgrade from version 4.0.0 to 5.1.0

You need to upgrade from version 4.0.0 to 4.1.0 first, then from 4.1.0 to 5.1.0. See Upgrade guide for the Splunk App for AWS in the 4.1.0 version of the documentation for upgrade steps and new behavior to be aware of.

Upgrade from a pre-4.X version to 5.1.0

If you are upgrading from a pre-4.X version of the app, install the version as a new app. Starting from version 4.X, the app has a new folder name, so it does not replace 3.X or older versions in your environment. See Migrate from an unsupported version of the Splunk App for AWS in the version 4.0.0 documentation.

Last modified on 21 March, 2019
Use a custom index for storing AWS accounts and inputs data   Troubleshoot the Splunk App for AWS

This documentation applies to the following versions of Splunk® App for AWS (EOL): 5.1.0, 5.1.1, 5.1.2

Acrobat logo Download manual
Acrobat logo Download this page

Please expect delayed responses to documentation feedback while the team migrates content to a new system. We value your input and thank you for your patience as we work to provide you with an improved content experience!

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters