Splunk® App for AWS (Legacy)

Release Notes

Acrobat logo Download manual as PDF


On July 15, 2022, the Splunk App for AWS will reach its end of life (EOL). After this date, Splunk will no longer maintain or develop this product. Splunk App for AWS is used for both IT monitoring and security use cases because it provides dashboards for both ITOps and security teams. The IT monitoring functionality in Splunk App for AWS is migrating to a content pack in Data Integrations called the Content Pack for Amazon Web Services Dashboards and Reports. The security use case functionality in Splunk App for AWS is migrating to the new Splunk App for AWS Security Dashboards. For more about migration options, see this community post.
This documentation does not apply to the most recent version of Splunk® App for AWS (Legacy). For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

The Splunk App for AWS Release Notes

These release notes apply to the Splunk App for AWS version 6.0.0.

For compatibility information, see Hardware and software requirements for the Splunk App for AWS.

Before you install version 6.0.0, you have to disable multiple saved searches and move indexes.conf. See Do these things before you upgrade in the Installation and Configuration Manual.

After you install version 6.0.0, you have to enable acceleration for data models, update the definition for the aws-data-model-acceleration search macro, and schedule the Addon Synchronization and App Upgrader saved searches. See Do these things after you upgrade in the Installation and Configuration Manual.

New features

New feature or enhancement Description
Python 3 support The Splunk App for AWS supports Python 2 and Python 3 in Splunk Enterprise version 8.0.0. For more information, see Python 3 migration with the Splunk platform in the Splunk Enterprise Python 3 Migration guide.
AWS Cost and Usage Reports (CUR) for billing data You can select to populate these billing dashboards and panels with AWS Cost and Usage Reports you collect on an hourly or daily basis:
  • Budget Planner dashboard
  • Historical Monthly Bills dashboard
  • Historical Detailed Bills dashboard
  • Capacity Planner dashboard
  • Reserved Instance Planner dashboard
  • Reserved Instance Inventory (RI Utilization by Family in Last Month panel)
  • Topology dashboard (Billing layer)
  • Reserved Instance Planner Detail dashboard

To start monitoring CUR data in the Splunk App for AWS, see Specify the type of AWS billing data to monitor.

Indexes The app no longer creates indexes when you install it. This gives administrators greater flexibility over data storage and retention rules for their deployment. To manually create indexes for the app, see Create indexes and schedule saved searches for the Splunk App for AWS.

Fixed issues

Date resolved Issue number Description
2019-10-03 AWSAPP-2206 A help link takes you to the wrong version of the app.
2019-10-02 AWSAPP-2160 Some accounts in the Splunk Add-on for Amazon Web Services don't populate in the app.
2019-10-01 AWSAPP-2153 A warning message is visible on dashboards even after you disable it from the Configure dashboard.

For fixed issues relevant to accounts, inputs configuration, and knowledge management, see the Fixed issues for the Splunk Add-on for Amazon Web Services.

Known issues

Date filed Issue number Description
2021-01-19 AWSAPP-2602 "Config rules" dashboard dedup results in missing information
2020-12-01 AWSAPP-2509 The EC2 Recommendations Service feature doesn't work on Splunk Cloud version 8.0.0. Affected dashboards are EC2 Insights, Insights functionality in Topology dashboard, and Insights Yesterday in the Insights Overview dashboard.
2019-08-21 AWSAPP-2156 There's a Capacity Planner: Data mismatch between Dashboard panels and the AWS Console.
2019-05-15 AWSAPP-2119 Capacity Planner (CUR): Value mismatch between panel data of Billing Legacy and Billing CUR.
2019-05-10 AWSAPP-2112 Historical Monthly Bills: Value mismatch in "Cost by Service" panel
2019-05-07 AWSAPP-2107 Billing CUR: Account Name is not visible in any of the dashboards or panels that use Billing (Cost and Usage Report) data.

For known issues relevant to accounts, inputs configuration, and knowledge management, see also Known issues for the Splunk Add-on for Amazon Web Services.

See also

To get started with the app, see the Installation and Configuration Manual.

For upgrade requirements, see Upgrade the Splunk App for AWS.

Last modified on 13 August, 2021
  NEXT
Credits for the Splunk App for AWS

This documentation applies to the following versions of Splunk® App for AWS (Legacy): 6.0.0

Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters