All Apps and Add-ons

Splunk App for AWS: Why is the Resource Relationship Viewer panel always empty for our installation?

msudhindra
Path Finder

Hello All,

Has anyone tried using the Resource Relationship Viewer within the Splunk App for AWS ?

For some reason, this panel always comes up empty for our installation.

When trying to troubleshoot this, it seems that this particular view uses a dataset called "aws_config_relationships", which is supposed to be a TSIDX on the search head, but I am unable to locate this dataset ever being generated on our search-head.

Any insight on whats going on here would be greatly appreciated !

Thanks and Regards,
Madan Sudhindra

0 Karma
1 Solution

msudhindra
Path Finder

I had enabled the search, from the Searches, Reports and Alerts panel, however the visualization still did not load.

I finally needed to restart the Splunk Searchhead in order for the tsidx to get created.

View solution in original post

msudhindra
Path Finder

I had enabled the search, from the Searches, Reports and Alerts panel, however the visualization still did not load.

I finally needed to restart the Splunk Searchhead in order for the tsidx to get created.

_d_
Splunk Employee
Splunk Employee

Have you enabled the search that generates the dataset?

  1. Go to Settings | Searches, Reports, and Alerts.

  2. Locate the search named AWS Config Relationship Generator.

  3. Click Enable.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...