How do we generate AWS reports in Splunk?

[sahils]

How do we generate AWS Reports in SPLUNK? How we can get breakdowns or summary reports per “Cost_Center” tag?

I have a Windows server and need a search for generating the AWS reports. Can we get reports from a Splunk app?

[rajanshrivastav]

Hi,

you can install splunk app for aws and in the configure section add your aws account by access key & secret key.

for billing section, the query will be like -
aws-billing-cloudwatch((aws_account_id=""), "")
| stats max(Sum) as sum by metric_dimensions LinkedAccountId
| rex field=metric_dimensions ".Currency=[(?.?)]" | stats sum(sum) as sum by Currency | sort -sum | head 1 | nadefault sum

by default this splunk app for aws will automatically fetch billing data from your aws account , for this you need an IAM credentials(access key & secret key) which has read access to all resources.

Thanks,
Rajan Shrivastav

[nkwong_splunk]

The latest version of the Splunk App for AWS includes a lot of new monthly billing reports that can be split by Account, Service, Region, etc. Here's a link to the documentation and details for the AWS Billing Dashboards.

[dolivasoh]

The splunk app for AWS has everything you need. Just create a new IAM user for Splunk and add it's access credentials to the technology add-on as per the documentation.

[sahils]

Can we generate AWS report for.

Account
Daily Cost
Tag Report
This Month vs. Last Month Detail
This Week vs. Last Week by Account
Total Invoiced Cost
Usage Type.

Please send me the query for the reports.

[rajanshrivastav]

Hi,

you can install splunk app for aws and in the configure section add your aws account by access key & secret key.

for billing section, the query will be like -
aws-billing-cloudwatch((aws_account_id="*"), "*")
| stats max(Sum) as sum by metric_dimensions LinkedAccountId
| rex field=metric_dimensions ".Currency=[(?.?)]"
| stats sum(sum) as sum by Currency
| sort -sum | head 1
| nadefault sum

by default this splunk app for aws will automatically fetch billing data from your aws account , for this you need an IAM credentials(access key & secret key) which has read access to all resources.

Thanks,
Rajan Shrivastav

[sahils]

Please Update ASAP.

[sahils]

Can we generate summary or breakdown report for Vendor, Account, Services in AWS billing report, Already AWS APP installed in Splunk.
Is there any Query Where We can generate reports . As of know I checked Linked Account and Services Option are present in AWS app For generating report But I did n't see any Vendor option in AWS Splunk App. Please let me know the Query Where I can generate the reports for Combined three for summary or breakdown report.

[sahils]

Is there any query where we can generate AWS billing report, How much AWS using o if we can get breakdowns or summary reports per “Cost_Center” tag. ,Is there any query where we can generate AWS billing reports or can get breakdowns or summary reports per “Cost_Center” tag.

[sahils]

How we can Cost center report in splunk for summary or breakdown , Already I have installed Splunk AWS App.