Install the Splunk Add-on for Amazon Kinesis Firehose on a single-instance Splunk Enterprise deployment

Install the Splunk Add-on for Amazon Kinesis Firehose on a single-instance Splunk Enterprise deployment.

Version 6.0.0 of the Splunk Add-on for AWS includes a merge of all the capabilities of the Splunk Add-on for Amazon Kinesis Firehose. Configure the Splunk Add-on for AWS to ingest across all AWS data sources for ingesting AWS data into Splunk.

If you use both the Splunk Add-on for Amazon Kinesis Firehose as well as the Splunk Add-on for AWS on the same Splunk instance, then you must uninstall the Splunk Add-on for Amazon Kinesis Firehose after upgrading the Splunk Add-on for AWS to version 6.0.0 or later in order to avoid any data duplication and discrepancy issues.

Data that you previously onboarded through the Splunk Add-on for Amazon Kinesis Firehose will still be searchable, and your existing searches will be compatible with version 6.0.0 of the Splunk Add-on for AWS.

If you are not currently using the Splunk Add-on for Amazon Kinesis Firehose, but plan to use it in the future, then the best practice is to download and configure version 6.0.0 or later of the Splunk Add-on for AWS, instead of the Splunk Add-on for Amazon Kinesis Firehose.

1. Download the Splunk Add-on for Amazon Kinesis Firehose from https://splunkbase.splunk.com/app/3719 or browsing to it using the app browser within Splunk Web.
2. Install the add-on to your Splunk Enterprise instance. For step-by-step instructions, see Install an add-on in a single-instance Splunk Enterprise deployment.
3. If you have not already done so, install an SSL certificate on your Splunk Enterprise instance. For instructions, see Configure your indexer to use your certificates in Securing Splunk Enterprise.

Next step
Configure HTTP event collector for the Splunk Add-on for Amazon Kinesis Firehose on a single-instance Splunk Enterprise deployment