New features in the Splunk App for AWS Security Dashboards

Splunk App for AWS is used for both IT monitoring and security use cases and provides dashboards for both IT monitoring and security teams. On July 15, 2022, the Splunk App for AWS will reach its end of life, which means Splunk will no longer maintain or develop this product. Splunk App for AWS Security Dashboards replaces Splunk App for AWS for security use cases.

For compatibility information, see System requirements for the Splunk App for AWS Security dashboards.

For IT monitoring use cases, the Content Pack for Amazon Web Services Dashboards and Reports replaces the Splunk App for AWS for Splunk IT Essentials Work (ITE Work) and Splunk IT Service Intelligence (ITSI) users.

Splunk App for AWS Security Dashboards version 1.1.0 was released on November 29, 2022. This version has these new features:

What's New

New feature or enhancement	Description
Support of the "aws:metadata" sourcetype	Splunk App for AWS Security Dashboards is now updated to support "aws:metadata" sourcetype. The dashboards will no longer support "aws:description" sourcetype.

See also

To get started with the app, see the Installation and Configuration Manual.

For steps to migrate from Splunk App for AWS to Splunk App for AWS Security Dashboards, see Migrate from the Splunk App for AWS to the Splunk App for AWS Security Dashboards.