Configure Amazon Web Services to collect data
Before you set up your Splunk add-on for AWS, You should set up your Amazon Web Services (AWS) configuration to collect and send specific AWS data types to your Splunk platform deployment.
The data types that you send from AWS to the Splunk platform deployment depend upon your deployment type and desired outcome. To configure AWS to send data to your Splunk deployment, see the Amazon Web Services documentation.
Download and install Trumpet
Trumpet is a configuration tool that leverages AWS CloudFormation to set up AWS infrastructure. This infrastructure pushes data to your Splunk platform instance using the HTTP Event Collector (HEC).
To install and configure Trumpet, see the README file on Github.
Configure Splunk Enterprise to work with Amazon Kinesis Firehose
This documentation applies to the following versions of Splunk® Enterprise: 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9