Available CloudFormation templates 🔗
You need to install the AWS integration first before you use any Cloudformation template. Learn more at Connect to AWS and send data to Splunk Observability Cloud.
Decide which CloudFormation template to use depending on your deployment method (for example, per AWS region or per AWS account) and integration type (for example, logs only, metric streams only, or both). Even if you don’t intend to use both logs and metrics, you can safely deploy a CloudFormation template, since unused infrastructure doesn’t generate costs.
Caution
If you want to collect logs, Splunk Log Observer is no longer available for new users. You can continue to use Log Observer if you already have an entitlement.
Prepopulated CloudFormation templates 🔗
Select the QuickLink for a template which supports Metric Streams or logs, it will open the AWS Management Console in the last region that you used.
Supports Log collection |
Supports Metric Streams |
Deployment type |
QuickLink |
Hosted template |
|---|---|---|---|---|
Yes |
Yes |
Once per account (using StackSets) |
Deploy this QuickLink |
|
Yes |
Yes |
In each region |
Deploy this QuickLink in every region |
|
Yes |
No |
Once per account (using StackSets) |
Deploy this QuickLink |
|
Yes |
No |
In each region |
Deploy this QuickLink in every region |
|
No |
Yes |
Once per account (using StackSets) |
Deploy this QuickLink |
|
No |
Yes |
In each region |
Deploy this QuickLink in every region |
From the CloudFormation templates table, select the QuickLink for a template with support for metric streams or logs. The QuickLink automatically opens the AWS Management Console in the last region you used, but you can select any other region in the AWS Management Console.
Custom CloudFormation templates 🔗
If none of the prepopulated CloudFormation templates meets your needs, you might create required resources using CloudFormation manually by following these steps:
Select the Hosted template link to download and modify the template you choose.
In the Quick Create stack dialog box for the selected template, enter the access token for your organization.
Select Create stack.
Use an API call to activate CloudWatch Metric Streams. To learn more, see Activate CloudWatch Metric Streams (optional).
You can optionally use AWS CloudFormation StackSets to work simultaneously across multiple AWS regions after configuring the StackSet prerequisites for self-managed permissions. For more details, see Amazon Web Services documentation to configure StackSet prerequisites.