Filter dashboards using tags

The Splunk App for AWS Security Dashboards enables you to filter content by the tags you have defined in Amazon Web Services.

Tags are custom metadata that you can use to identify and organize your AWS resources. Each of your resources can have up to ten tags, each of which consists of a key and an optional value. Search "Tag Editor" in AWS documentation for more information about defining tags in Amazon Web Services.

Use the tags filter on a dashboard

To use the tags filter, navigate to the Resource Activity dashboard.

In the Tags field, enter your search criteria for filtering AWS resources data based on tag values. The tags filter supports the following operators:

key=value
key!=value
key1=value1 AND key2=value2
key1=value1 OR key2!=value2

Not all dashboards include a tags filter, because the data in some dashboards is not relevant to tags.

Reference

For more information about how to create tags in AWS, see Tag Editor in the AWS Resource Groups and Tags documentation. You can also read the AWS documentation for specific services for more detailed information and best practices for how to apply tags to your resources.