Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
All Apps and Add-ons
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Apps and Add-ons
- :
- All Apps and Add-ons
- :
- Splunk Add-on for Amazon Web Services: Why are ALB...
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
nikki603
Engager
02-27-2017
12:17 PM
I'm using the latest Splunk Add-on for Amazon Web Services to pull in access logs from an ALB but the Splunk logs don't indicate that any logs are being found even though I can see the log.gz files in S3, nor do they tell me what is wrong. I have an AWS::ElasticLoadBalancingV2::LoadBalancer with access logs enabled. Can anyone tell me what they are doing that works? I am configuring the Input as:
[splunk_ta_aws_logs://alb]
aws_account = IA Dev
bucket_name = development-alb-private-logging
bucket_region = us-east-1
host_name = s3.amazonaws.com
interval = 30
log_start_date = 2017-02-26
log_type = elb:accesslogs
sourcetype = aws:alb:accesslogs
splunk_ta_aws_logs_alb.log
2017-02-27 19:56:08,267 INFO pid=27657 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "host": "splunkenterprise", "max_fails": "10000", "interval": "30", "start_by_shell": "false", "log_type": "elb:accesslogs", "aws_account": "IA Dev", "max_retries": "-1", "log_start_date": "2017-02-26", "sourcetype": "aws:alb:accesslogs", "bucket_region": "us-east-1", "index": "default"}
2017-02-27 19:56:08,267 INFO pid=27657 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:56:07,846 INFO pid=27657 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:55:44,775 INFO pid=27384 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:55:44,774 INFO pid=27384 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:55:43,599 INFO pid=27408 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:55:43,575 INFO pid=27408 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:55:40,661 INFO pid=27408 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:55:40,660 INFO pid=27408 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:55:40,279 INFO pid=27408 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:55:40,279 INFO pid=27408 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:55:40,278 INFO pid=27408 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:55:40,275 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:55:40,274 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:55:40,182 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:55:39,329 INFO pid=27384 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:55:39,327 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:55:39,264 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:55:39,262 INFO pid=27384 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:55:39,029 INFO pid=27384 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:55:38,983 INFO pid=27384 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:55:38,280 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"start_by_shell": "false", "host": "splunkenterprise", "interval": "30", "max_fails": "10000", "sourcetype": "aws:alb:accesslogs", "aws_account": "IA Dev", "index": "default", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "max_retries": "-1", "log_start_date": "2017-02-26", "bucket_name": "development-alb-private-logging", "log_type": "elb:accesslogs"}
2017-02-27 19:55:38,279 INFO pid=27384 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:55:37,836 INFO pid=27384 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:55:15,548 INFO pid=27173 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:55:15,547 INFO pid=27173 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:55:13,931 INFO pid=27198 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:55:13,884 INFO pid=27198 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:55:10,914 INFO pid=27198 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:55:10,913 INFO pid=27198 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:55:10,322 INFO pid=27198 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:55:10,322 INFO pid=27198 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:55:10,316 INFO pid=27198 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:55:10,313 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:55:10,312 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:55:10,215 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:55:09,912 INFO pid=27173 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:55:09,904 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:55:09,814 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:55:09,812 INFO pid=27173 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:55:09,564 INFO pid=27173 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:55:09,510 INFO pid=27173 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:55:08,354 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "aws_account": "IA Dev", "sourcetype": "aws:alb:accesslogs", "bucket_name": "development-alb-private-logging", "max_fails": "10000", "host": "splunkenterprise", "log_type": "elb:accesslogs", "log_start_date": "2017-02-26", "index": "default", "max_retries": "-1", "interval": "30", "start_by_shell": "false"}
2017-02-27 19:55:08,354 INFO pid=27173 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:55:07,905 INFO pid=27173 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:54:44,875 INFO pid=26900 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:54:44,874 INFO pid=26900 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:54:43,869 INFO pid=26992 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:54:43,844 INFO pid=26992 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:54:40,916 INFO pid=26992 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:54:40,913 INFO pid=26992 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:54:40,305 INFO pid=26992 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:54:40,305 INFO pid=26992 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:54:40,304 INFO pid=26992 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:54:40,301 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:54:40,301 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:54:40,199 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:54:39,900 INFO pid=26900 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:54:39,899 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:54:39,748 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:54:39,739 INFO pid=26900 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:54:39,364 INFO pid=26900 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:54:39,221 INFO pid=26900 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:54:38,268 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "log_start_date": "2017-02-26", "index": "default", "interval": "30", "bucket_region": "us-east-1", "start_by_shell": "false", "max_fails": "10000", "max_retries": "-1", "host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "aws_account": "IA Dev"}
2017-02-27 19:54:38,268 INFO pid=26900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:54:37,869 INFO pid=26900 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:54:14,383 INFO pid=26482 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:54:14,383 INFO pid=26482 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:54:13,361 INFO pid=26506 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:54:13,328 INFO pid=26506 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:54:10,386 INFO pid=26506 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:54:10,381 INFO pid=26506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:54:10,036 INFO pid=26506 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:54:10,036 INFO pid=26506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:54:10,035 INFO pid=26506 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:54:10,030 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:54:10,030 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:54:09,938 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:54:09,658 INFO pid=26482 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:54:09,657 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:54:09,540 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:54:09,533 INFO pid=26482 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:54:09,299 INFO pid=26482 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:54:09,216 INFO pid=26482 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:54:08,406 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_start_date": "2017-02-26", "bucket_region": "us-east-1", "interval": "30", "bucket_name": "development-alb-private-logging", "start_by_shell": "false", "aws_account": "IA Dev", "max_retries": "-1", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "index": "default", "sourcetype": "aws:alb:accesslogs", "host": "splunkenterprise", "max_fails": "10000"}
2017-02-27 19:54:08,405 INFO pid=26482 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:54:07,870 INFO pid=26482 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:53:44,772 INFO pid=26275 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:53:44,772 INFO pid=26275 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:53:43,185 INFO pid=26299 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:53:43,153 INFO pid=26299 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:53:40,240 INFO pid=26299 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:53:40,239 INFO pid=26299 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:53:39,852 INFO pid=26299 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:53:39,852 INFO pid=26299 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:53:39,852 INFO pid=26299 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:53:39,849 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:53:39,848 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:53:39,678 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:53:39,297 INFO pid=26275 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:53:39,296 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:53:39,221 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:53:39,219 INFO pid=26275 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:53:38,994 INFO pid=26275 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:53:38,957 INFO pid=26275 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:53:38,271 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_name": "development-alb-private-logging", "index": "default", "log_start_date": "2017-02-26", "log_type": "elb:accesslogs", "max_retries": "-1", "interval": "30", "sourcetype": "aws:alb:accesslogs", "host": "splunkenterprise", "max_fails": "10000", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "start_by_shell": "false", "aws_account": "IA Dev"}
2017-02-27 19:53:38,271 INFO pid=26275 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:53:37,832 INFO pid=26275 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:53:15,024 INFO pid=25872 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:53:15,024 INFO pid=25872 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:53:13,407 INFO pid=25896 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:53:13,382 INFO pid=25896 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:53:10,453 INFO pid=25896 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:53:10,451 INFO pid=25896 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:53:10,096 INFO pid=25896 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:53:10,096 INFO pid=25896 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:53:10,093 INFO pid=25896 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:53:10,089 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:53:10,089 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:53:10,008 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:53:09,717 INFO pid=25872 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:53:09,716 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:53:09,580 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:53:09,578 INFO pid=25872 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:53:09,343 INFO pid=25872 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:53:09,304 INFO pid=25872 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:53:08,365 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"sourcetype": "aws:alb:accesslogs", "max_fails": "10000", "host": "splunkenterprise", "aws_account": "IA Dev", "interval": "30", "max_retries": "-1", "log_type": "elb:accesslogs", "bucket_region": "us-east-1", "host_name": "s3.amazonaws.com", "log_start_date": "2017-02-26", "index": "default", "bucket_name": "development-alb-private-logging", "start_by_shell": "false"}
2017-02-27 19:53:08,365 INFO pid=25872 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:53:07,920 INFO pid=25872 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:52:44,852 INFO pid=25582 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:52:44,852 INFO pid=25582 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:52:43,000 INFO pid=25621 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:52:42,975 INFO pid=25621 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:52:40,046 INFO pid=25621 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:52:40,044 INFO pid=25621 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:52:39,715 INFO pid=25621 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:52:39,715 INFO pid=25621 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:52:39,714 INFO pid=25621 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:52:39,707 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:52:39,706 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:52:39,605 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:52:39,300 INFO pid=25582 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:52:39,298 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:52:39,215 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:52:39,203 INFO pid=25582 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:52:38,971 INFO pid=25582 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:52:38,943 INFO pid=25582 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:52:38,213 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_region": "us-east-1", "log_start_date": "2017-02-26", "sourcetype": "aws:alb:accesslogs", "index": "default", "start_by_shell": "false", "interval": "30", "aws_account": "IA Dev", "max_retries": "-1", "log_type": "elb:accesslogs", "host_name": "s3.amazonaws.com", "bucket_name": "development-alb-private-logging", "max_fails": "10000", "host": "splunkenterprise"}
2017-02-27 19:52:38,212 INFO pid=25582 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:52:37,805 INFO pid=25582 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:52:14,906 INFO pid=25418 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:52:14,906 INFO pid=25418 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:52:13,129 INFO pid=25442 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:52:13,104 INFO pid=25442 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:52:10,155 INFO pid=25442 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:52:10,153 INFO pid=25442 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:52:09,870 INFO pid=25442 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:52:09,870 INFO pid=25442 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:52:09,869 INFO pid=25442 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:52:09,865 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:52:09,865 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:52:09,665 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:52:09,365 INFO pid=25418 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:52:09,363 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:52:09,278 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:52:09,276 INFO pid=25418 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:52:09,056 INFO pid=25418 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:52:09,015 INFO pid=25418 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:52:08,263 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "start_by_shell": "false", "log_start_date": "2017-02-26", "interval": "30", "aws_account": "IA Dev", "max_fails": "10000", "bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "max_retries": "-1", "index": "default", "bucket_region": "us-east-1"}
2017-02-27 19:52:08,263 INFO pid=25418 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:52:07,855 INFO pid=25418 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:51:44,881 INFO pid=25259 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:51:44,881 INFO pid=25259 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:51:42,958 INFO pid=25283 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:51:42,931 INFO pid=25283 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:51:40,006 INFO pid=25283 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:51:40,004 INFO pid=25283 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:51:39,618 INFO pid=25283 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:51:39,618 INFO pid=25283 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:51:39,617 INFO pid=25283 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:51:39,615 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:51:39,615 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:51:39,515 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:51:39,212 INFO pid=25259 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:51:39,210 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:51:39,136 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:51:39,135 INFO pid=25259 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:51:38,901 INFO pid=25259 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:51:38,862 INFO pid=25259 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:51:38,269 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_name": "development-alb-private-logging", "interval": "30", "log_start_date": "2017-02-26", "sourcetype": "aws:alb:accesslogs", "bucket_region": "us-east-1", "host": "splunkenterprise", "max_fails": "10000", "start_by_shell": "false", "host_name": "s3.amazonaws.com", "max_retries": "-1", "index": "default", "aws_account": "IA Dev", "log_type": "elb:accesslogs"}
2017-02-27 19:51:38,268 INFO pid=25259 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:51:37,905 INFO pid=25259 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:51:15,452 INFO pid=25095 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:51:15,452 INFO pid=25095 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:51:13,874 INFO pid=25119 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:51:13,856 INFO pid=25119 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:51:10,895 INFO pid=25119 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:51:10,893 INFO pid=25119 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:51:10,308 INFO pid=25119 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:51:10,308 INFO pid=25119 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:51:10,307 INFO pid=25119 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:51:10,305 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:51:10,304 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:51:10,213 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:51:09,854 INFO pid=25095 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:51:09,851 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:51:09,727 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:51:09,724 INFO pid=25095 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:51:09,362 INFO pid=25095 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:51:09,305 INFO pid=25095 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:51:08,351 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"index": "default", "sourcetype": "aws:alb:accesslogs", "max_fails": "10000", "host": "splunkenterprise", "bucket_name": "development-alb-private-logging", "log_type": "elb:accesslogs", "start_by_shell": "false", "interval": "30", "log_start_date": "2017-02-26", "max_retries": "-1", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "aws_account": "IA Dev"}
2017-02-27 19:51:08,351 INFO pid=25095 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:51:07,989 INFO pid=25095 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:50:44,209 INFO pid=24867 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:50:44,209 INFO pid=24867 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:50:42,973 INFO pid=24891 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:50:42,929 INFO pid=24891 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:50:40,026 INFO pid=24891 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:50:40,024 INFO pid=24891 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:50:39,608 INFO pid=24891 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:50:39,608 INFO pid=24891 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:50:39,606 INFO pid=24891 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:50:39,602 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:50:39,601 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:50:39,515 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:50:39,229 INFO pid=24867 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:50:39,227 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:50:39,123 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:50:39,122 INFO pid=24867 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:50:38,890 INFO pid=24867 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:50:38,843 INFO pid=24867 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:50:38,199 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "aws_account": "IA Dev", "interval": "30", "start_by_shell": "false", "bucket_region": "us-east-1", "log_start_date": "2017-02-26", "max_fails": "10000", "max_retries": "-1", "log_type": "elb:accesslogs", "index": "default"}
2017-02-27 19:50:38,199 INFO pid=24867 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:50:37,823 INFO pid=24867 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:50:14,837 INFO pid=24638 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:50:14,837 INFO pid=24638 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:50:13,794 INFO pid=24663 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:50:13,768 INFO pid=24663 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:50:10,832 INFO pid=24663 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:50:10,829 INFO pid=24663 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:50:10,456 INFO pid=24663 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:50:10,456 INFO pid=24663 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:50:10,455 INFO pid=24663 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:50:10,453 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:50:10,452 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:50:10,360 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:50:10,027 INFO pid=24638 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:50:10,025 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:50:09,923 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:50:09,921 INFO pid=24638 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:50:09,685 INFO pid=24638 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:50:09,651 INFO pid=24638 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:50:08,641 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"index": "default", "interval": "30", "host": "splunkenterprise", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "sourcetype": "aws:alb:accesslogs", "start_by_shell": "false", "max_retries": "-1", "bucket_region": "us-east-1", "log_start_date": "2017-02-26", "max_fails": "10000", "bucket_name": "development-alb-private-logging", "aws_account": "IA Dev"}
2017-02-27 19:50:08,640 INFO pid=24638 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:50:07,927 INFO pid=24638 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:49:44,919 INFO pid=24480 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:49:44,918 INFO pid=24480 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:49:43,002 INFO pid=24505 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:49:42,981 INFO pid=24505 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:49:40,019 INFO pid=24505 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:49:40,018 INFO pid=24505 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:49:39,743 INFO pid=24505 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:49:39,743 INFO pid=24505 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:49:39,742 INFO pid=24505 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:49:39,739 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:49:39,739 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:49:39,649 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:49:39,328 INFO pid=24480 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:49:39,326 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:49:39,254 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:49:39,252 INFO pid=24480 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:49:39,007 INFO pid=24480 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:49:38,979 INFO pid=24480 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:49:38,238 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"interval": "30", "aws_account": "IA Dev", "log_type": "elb:accesslogs", "host": "splunkenterprise", "max_fails": "10000", "sourcetype": "aws:alb:accesslogs", "max_retries": "-1", "bucket_name": "development-alb-private-logging", "start_by_shell": "false", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "index": "default", "log_start_date": "2017-02-26"}
2017-02-27 19:49:38,238 INFO pid=24480 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:49:37,814 INFO pid=24480 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:49:15,660 INFO pid=24267 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:49:15,660 INFO pid=24267 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:49:13,862 INFO pid=24307 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:49:13,839 INFO pid=24307 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:49:10,887 INFO pid=24307 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:49:10,885 INFO pid=24307 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:49:10,493 INFO pid=24307 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:49:10,493 INFO pid=24307 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:49:10,492 INFO pid=24307 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:49:10,489 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:49:10,488 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:49:10,398 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:49:10,101 INFO pid=24267 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:49:10,099 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:49:09,953 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:49:09,951 INFO pid=24267 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:49:09,630 INFO pid=24267 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:49:09,601 INFO pid=24267 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:49:08,588 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"max_retries": "-1", "aws_account": "IA Dev", "start_by_shell": "false", "bucket_name": "development-alb-private-logging", "bucket_region": "us-east-1", "log_start_date": "2017-02-26", "max_fails": "10000", "host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "index": "default", "interval": "30", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs"}
2017-02-27 19:49:08,588 INFO pid=24267 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:49:07,956 INFO pid=24267 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:48:45,252 INFO pid=24109 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:48:45,252 INFO pid=24109 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:48:43,433 INFO pid=24133 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:48:43,412 INFO pid=24133 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:48:40,502 INFO pid=24133 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:48:40,494 INFO pid=24133 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:48:39,908 INFO pid=24133 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:48:39,906 INFO pid=24133 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:48:39,905 INFO pid=24133 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:48:39,902 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:48:39,901 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:48:39,807 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:48:39,413 INFO pid=24109 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:48:39,412 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:48:39,328 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:48:39,327 INFO pid=24109 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:48:39,082 INFO pid=24109 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:48:39,027 INFO pid=24109 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:48:38,211 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_type": "elb:accesslogs", "log_start_date": "2017-02-26", "bucket_region": "us-east-1", "aws_account": "IA Dev", "bucket_name": "development-alb-private-logging", "max_fails": "10000", "start_by_shell": "false", "max_retries": "-1", "index": "default", "interval": "30", "host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "host_name": "s3.amazonaws.com"}
2017-02-27 19:48:38,211 INFO pid=24109 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:48:37,786 INFO pid=24109 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:48:14,797 INFO pid=23828 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:48:14,796 INFO pid=23828 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:48:12,994 INFO pid=23851 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:48:12,971 INFO pid=23851 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:48:10,024 INFO pid=23851 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:48:10,022 INFO pid=23851 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:48:09,670 INFO pid=23851 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:48:09,670 INFO pid=23851 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:48:09,669 INFO pid=23851 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:48:09,667 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:48:09,666 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:48:09,506 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:48:09,203 INFO pid=23828 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:48:09,202 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:48:09,138 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:48:09,136 INFO pid=23828 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:48:08,908 INFO pid=23828 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:48:08,880 INFO pid=23828 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:48:08,168 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"sourcetype": "aws:alb:accesslogs", "bucket_name": "development-alb-private-logging", "max_retries": "-1", "log_type": "elb:accesslogs", "interval": "30", "host_name": "s3.amazonaws.com", "host": "splunkenterprise", "aws_account": "IA Dev", "start_by_shell": "false", "bucket_region": "us-east-1", "index": "default", "log_start_date": "2017-02-26", "max_fails": "10000"}
2017-02-27 19:48:08,168 INFO pid=23828 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:48:07,798 INFO pid=23828 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:47:44,784 INFO pid=23670 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:47:44,784 INFO pid=23670 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:47:43,135 INFO pid=23695 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:47:43,115 INFO pid=23695 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:47:40,157 INFO pid=23695 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:47:40,155 INFO pid=23695 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:47:39,764 INFO pid=23695 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:47:39,764 INFO pid=23695 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:47:39,763 INFO pid=23695 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:47:39,759 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:47:39,758 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:47:39,664 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:47:39,355 INFO pid=23670 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:47:39,353 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:47:39,297 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:47:39,295 INFO pid=23670 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:47:39,086 INFO pid=23670 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:47:39,023 INFO pid=23670 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:47:38,245 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"max_fails": "10000", "sourcetype": "aws:alb:accesslogs", "log_type": "elb:accesslogs", "max_retries": "-1", "interval": "30", "host": "splunkenterprise", "aws_account": "IA Dev", "index": "default", "log_start_date": "2017-02-26", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "start_by_shell": "false", "bucket_name": "development-alb-private-logging"}
2017-02-27 19:47:38,245 INFO pid=23670 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:47:37,803 INFO pid=23670 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:47:15,018 INFO pid=23506 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:47:15,017 INFO pid=23506 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:47:13,244 INFO pid=23530 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:47:13,219 INFO pid=23530 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:47:10,283 INFO pid=23530 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:47:10,280 INFO pid=23530 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:47:09,767 INFO pid=23530 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:47:09,767 INFO pid=23530 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:47:09,767 INFO pid=23530 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:47:09,764 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:47:09,764 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:47:09,674 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:47:09,378 INFO pid=23506 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:47:09,377 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:47:09,317 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:47:09,314 INFO pid=23506 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:47:09,090 INFO pid=23506 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:47:09,061 INFO pid=23506 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:47:08,190 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_type": "elb:accesslogs", "log_start_date": "2017-02-26", "index": "default", "interval": "30", "bucket_region": "us-east-1", "sourcetype": "aws:alb:accesslogs", "host": "splunkenterprise", "bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "max_retries": "-1", "aws_account": "IA Dev", "start_by_shell": "false", "max_fails": "10000"}
2017-02-27 19:47:08,190 INFO pid=23506 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:47:07,771 INFO pid=23506 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:46:45,391 INFO pid=23251 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:46:45,391 INFO pid=23251 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:46:43,788 INFO pid=23372 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:46:43,766 INFO pid=23372 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:46:40,818 INFO pid=23372 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:46:40,817 INFO pid=23372 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:46:40,427 INFO pid=23372 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:46:40,427 INFO pid=23372 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:46:40,426 INFO pid=23372 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:46:40,422 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:46:40,422 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:46:40,243 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:46:39,986 INFO pid=23251 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:46:39,984 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:46:39,856 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:46:39,850 INFO pid=23251 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:46:39,597 INFO pid=23251 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:46:39,489 INFO pid=23251 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:46:38,282 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"aws_account": "IA Dev", "log_type": "elb:accesslogs", "interval": "30", "max_fails": "10000", "host": "splunkenterprise", "start_by_shell": "false", "log_start_date": "2017-02-26", "max_retries": "-1", "bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "index": "default", "bucket_region": "us-east-1", "sourcetype": "aws:alb:accesslogs"}
2017-02-27 19:46:38,281 INFO pid=23251 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:46:37,786 INFO pid=23251 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:46:15,345 INFO pid=22900 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:46:15,345 INFO pid=22900 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:46:13,720 INFO pid=22924 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:46:13,692 INFO pid=22924 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:46:10,761 INFO pid=22924 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:46:10,759 INFO pid=22924 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:46:10,170 INFO pid=22924 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:46:10,170 INFO pid=22924 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:46:10,169 INFO pid=22924 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:46:10,165 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:46:10,165 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:46:10,020 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:46:09,704 INFO pid=22900 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:46:09,702 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:46:09,583 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:46:09,582 INFO pid=22900 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:46:09,351 INFO pid=22900 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:46:09,298 INFO pid=22900 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:46:08,390 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"interval": "30", "host": "splunkenterprise", "start_by_shell": "false", "max_retries": "-1", "max_fails": "10000", "sourcetype": "aws:alb:accesslogs", "index": "default", "aws_account": "IA Dev", "bucket_name": "development-alb-private-logging", "log_type": "elb:accesslogs", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "log_start_date": "2017-02-26"}
2017-02-27 19:46:08,390 INFO pid=22900 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:46:07,839 INFO pid=22900 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:45:44,883 INFO pid=22742 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:45:44,883 INFO pid=22742 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:45:43,298 INFO pid=22767 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:45:43,275 INFO pid=22767 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:45:40,318 INFO pid=22767 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:45:40,317 INFO pid=22767 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:45:39,738 INFO pid=22767 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:45:39,738 INFO pid=22767 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:45:39,737 INFO pid=22767 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:45:39,725 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:45:39,725 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:45:39,622 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:45:39,346 INFO pid=22742 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:45:39,345 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:45:39,292 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:45:39,290 INFO pid=22742 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:45:39,052 INFO pid=22742 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:45:39,001 INFO pid=22742 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:45:38,114 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"index": "default", "interval": "30", "host": "splunkenterprise", "host_name": "s3.amazonaws.com", "log_start_date": "2017-02-26", "log_type": "elb:accesslogs", "sourcetype": "aws:alb:accesslogs", "start_by_shell": "false", "max_retries": "-1", "bucket_region": "us-east-1", "max_fails": "10000", "bucket_name": "development-alb-private-logging", "aws_account": "IA Dev"}
2017-02-27 19:45:38,114 INFO pid=22742 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:45:37,751 INFO pid=22742 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:45:15,716 INFO pid=22579 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:45:15,715 INFO pid=22579 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:45:13,950 INFO pid=22603 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:45:13,927 INFO pid=22603 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:45:11,000 INFO pid=22603 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:45:10,999 INFO pid=22603 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:45:10,693 INFO pid=22603 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:45:10,693 INFO pid=22603 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:45:10,691 INFO pid=22603 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:45:10,689 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:45:10,689 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:45:10,548 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:45:10,174 INFO pid=22579 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:45:10,173 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:45:10,082 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:45:10,081 INFO pid=22579 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:45:09,833 INFO pid=22579 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:45:09,734 INFO pid=22579 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:45:08,700 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_region": "us-east-1", "host": "splunkenterprise", "max_fails": "10000", "bucket_name": "development-alb-private-logging", "max_retries": "-1", "aws_account": "IA Dev", "start_by_shell": "false", "index": "default", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "interval": "30", "sourcetype": "aws:alb:accesslogs", "log_start_date": "2017-02-26"}
2017-02-27 19:45:08,700 INFO pid=22579 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:45:07,940 INFO pid=22579 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:44:44,664 INFO pid=22421 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:44:44,664 INFO pid=22421 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:44:43,035 INFO pid=22445 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:44:43,006 INFO pid=22445 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:44:40,076 INFO pid=22445 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:44:40,074 INFO pid=22445 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:44:39,732 INFO pid=22445 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:44:39,731 INFO pid=22445 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:44:39,731 INFO pid=22445 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:44:39,728 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:44:39,728 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:44:39,623 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:44:39,323 INFO pid=22421 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:44:39,322 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:44:39,250 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:44:39,248 INFO pid=22421 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:44:39,021 INFO pid=22421 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:44:38,995 INFO pid=22421 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:44:38,261 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_type": "elb:accesslogs", "host": "splunkenterprise", "index": "default", "log_start_date": "2017-02-26", "bucket_region": "us-east-1", "start_by_shell": "false", "aws_account": "IA Dev", "interval": "30", "bucket_name": "development-alb-private-logging", "sourcetype": "aws:alb:accesslogs", "max_retries": "-1", "host_name": "s3.amazonaws.com", "max_fails": "10000"}
2017-02-27 19:44:38,260 INFO pid=22421 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:44:37,827 INFO pid=22421 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:44:15,103 INFO pid=22255 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:44:15,103 INFO pid=22255 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:44:13,176 INFO pid=22280 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:44:13,155 INFO pid=22280 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:44:10,256 INFO pid=22280 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:44:10,255 INFO pid=22280 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:44:09,705 INFO pid=22280 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:44:09,704 INFO pid=22280 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:44:09,704 INFO pid=22280 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:44:09,701 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:44:09,701 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:44:09,656 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:44:09,342 INFO pid=22255 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:44:09,341 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:44:09,239 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:44:09,238 INFO pid=22255 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:44:09,001 INFO pid=22255 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:44:08,964 INFO pid=22255 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:44:08,181 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"max_retries": "-1", "host": "splunkenterprise", "aws_account": "IA Dev", "log_type": "elb:accesslogs", "max_fails": "10000", "log_start_date": "2017-02-26", "start_by_shell": "false", "index": "default", "bucket_region": "us-east-1", "interval": "30", "bucket_name": "development-alb-private-logging", "sourcetype": "aws:alb:accesslogs", "host_name": "s3.amazonaws.com"}
2017-02-27 19:44:08,180 INFO pid=22255 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:44:07,758 INFO pid=22255 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:43:44,510 INFO pid=22081 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:43:44,510 INFO pid=22081 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:43:43,029 INFO pid=22106 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:43:43,006 INFO pid=22106 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:43:40,100 INFO pid=22106 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:43:40,098 INFO pid=22106 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:43:39,771 INFO pid=22106 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:43:39,770 INFO pid=22106 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:43:39,770 INFO pid=22106 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:43:39,767 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:43:39,766 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:43:39,675 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:43:39,345 INFO pid=22081 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:43:39,343 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:43:39,288 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:43:39,287 INFO pid=22081 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:43:39,070 INFO pid=22081 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:43:39,039 INFO pid=22081 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:43:38,199 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_start_date": "2017-02-26", "index": "default", "bucket_region": "us-east-1", "host_name": "s3.amazonaws.com", "start_by_shell": "false", "bucket_name": "development-alb-private-logging", "aws_account": "IA Dev", "sourcetype": "aws:alb:accesslogs", "max_fails": "10000", "max_retries": "-1", "log_type": "elb:accesslogs", "host": "splunkenterprise", "interval": "30"}
2017-02-27 19:43:38,199 INFO pid=22081 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:43:37,810 INFO pid=22081 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:43:14,793 INFO pid=21918 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:43:14,793 INFO pid=21918 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:43:13,148 INFO pid=21942 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:43:13,128 INFO pid=21942 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:43:10,209 INFO pid=21942 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:43:10,208 INFO pid=21942 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:43:09,851 INFO pid=21942 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:43:09,850 INFO pid=21942 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:43:09,849 INFO pid=21942 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:43:09,845 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:43:09,844 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:43:09,744 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:43:09,407 INFO pid=21918 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:43:09,405 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:43:09,336 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:43:09,334 INFO pid=21918 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:43:09,065 INFO pid=21918 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:43:09,004 INFO pid=21918 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:43:08,268 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"max_fails": "10000", "bucket_name": "development-alb-private-logging", "host_name": "s3.amazonaws.com", "log_type": "elb:accesslogs", "bucket_region": "us-east-1", "max_retries": "-1", "start_by_shell": "false", "aws_account": "IA Dev", "index": "default", "interval": "30", "host": "splunkenterprise", "sourcetype": "aws:alb:accesslogs", "log_start_date": "2017-02-26"}
2017-02-27 19:43:08,267 INFO pid=21918 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:43:07,850 INFO pid=21918 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:42:44,659 INFO pid=21760 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:42:44,659 INFO pid=21760 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:42:42,870 INFO pid=21783 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:42:42,848 INFO pid=21783 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:42:39,939 INFO pid=21783 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:42:39,937 INFO pid=21783 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:42:39,552 INFO pid=21783 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:42:39,552 INFO pid=21783 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:42:39,549 INFO pid=21783 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:42:39,544 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:42:39,543 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:42:39,452 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:42:39,131 INFO pid=21760 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:42:39,121 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:42:39,036 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:42:39,033 INFO pid=21760 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:42:38,742 INFO pid=21760 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:42:38,712 INFO pid=21760 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:42:38,087 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"interval": "30", "aws_account": "IA Dev", "host_name": "s3.amazonaws.com", "start_by_shell": "false", "bucket_region": "us-east-1", "host": "splunkenterprise", "max_fails": "10000", "bucket_name": "development-alb-private-logging", "sourcetype": "aws:alb:accesslogs", "log_type": "elb:accesslogs", "max_retries": "-1", "log_start_date": "2017-02-26", "index": "default"}
2017-02-27 19:42:38,086 INFO pid=21760 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:42:37,780 INFO pid=21760 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:42:16,816 INFO pid=21594 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:42:16,815 INFO pid=21594 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:42:15,126 INFO pid=21619 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:42:15,085 INFO pid=21619 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:42:12,165 INFO pid=21619 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:42:12,163 INFO pid=21619 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:42:11,708 INFO pid=21619 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:42:11,707 INFO pid=21619 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:42:11,706 INFO pid=21619 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:42:11,698 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:42:11,695 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:42:11,372 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:42:10,100 INFO pid=21594 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:42:10,097 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:42:09,993 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:42:09,991 INFO pid=21594 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:42:08,961 INFO pid=21594 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:42:08,918 INFO pid=21594 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:42:08,161 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"start_by_shell": "false", "log_start_date": "2017-02-26", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "index": "default", "log_type": "elb:accesslogs", "max_fails": "10000", "aws_account": "IA Dev", "interval": "30", "sourcetype": "aws:alb:accesslogs", "max_retries": "-1", "bucket_name": "development-alb-private-logging", "host": "splunkenterprise"}
2017-02-27 19:42:08,161 INFO pid=21594 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:42:07,747 INFO pid=21594 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:41:51,618 INFO pid=21433 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:41:51,617 INFO pid=21433 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:41:49,663 INFO pid=21459 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:41:49,646 INFO pid=21459 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:41:43,713 INFO pid=21459 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:41:43,712 INFO pid=21459 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:41:43,306 INFO pid=21459 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:41:43,306 INFO pid=21459 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:41:43,305 INFO pid=21459 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:41:43,301 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:41:43,300 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:41:42,777 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:41:40,714 INFO pid=21433 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:41:40,706 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:41:40,623 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:41:40,621 INFO pid=21433 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:41:39,002 INFO pid=21433 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:41:38,956 INFO pid=21433 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:41:38,173 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_start_date": "2017-02-26", "interval": "30", "host": "splunkenterprise", "index": "default", "start_by_shell": "false", "sourcetype": "aws:alb:accesslogs", "aws_account": "IA Dev", "log_type": "elb:accesslogs", "bucket_name": "development-alb-private-logging", "max_retries": "-1", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "max_fails": "10000"}
2017-02-27 19:41:38,172 INFO pid=21433 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:41:37,790 INFO pid=21433 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:41:16,700 INFO pid=21268 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:41:16,700 INFO pid=21268 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:41:15,307 INFO pid=21294 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:41:15,289 INFO pid=21294 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:41:12,342 INFO pid=21294 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:41:12,340 INFO pid=21294 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:41:11,988 INFO pid=21294 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:41:11,988 INFO pid=21294 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:41:11,987 INFO pid=21294 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:41:11,985 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:41:11,984 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:41:11,678 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:41:10,670 INFO pid=21268 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:41:10,667 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:41:10,601 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:41:10,600 INFO pid=21268 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:41:09,132 INFO pid=21268 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:41:09,105 INFO pid=21268 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:41:08,320 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"bucket_region": "us-east-1", "sourcetype": "aws:alb:accesslogs", "host": "splunkenterprise", "index": "default", "log_start_date": "2017-02-26", "log_type": "elb:accesslogs", "max_retries": "-1", "aws_account": "IA Dev", "interval": "30", "bucket_name": "development-alb-private-logging", "max_fails": "10000", "start_by_shell": "false", "host_name": "s3.amazonaws.com"}
2017-02-27 19:41:08,320 INFO pid=21268 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:41:07,848 INFO pid=21268 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:40:50,780 INFO pid=20887 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:40:50,777 INFO pid=20887 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:40:49,700 INFO pid=20961 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:40:49,676 INFO pid=20961 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:40:43,746 INFO pid=20961 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:40:43,744 INFO pid=20961 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:40:43,322 INFO pid=20961 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:40:43,322 INFO pid=20961 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:40:43,321 INFO pid=20961 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:40:43,318 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:40:43,317 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:40:42,870 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:40:40,860 INFO pid=20887 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:40:40,843 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:40:40,654 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:40:40,651 INFO pid=20887 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:40:39,193 INFO pid=20887 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:40:39,166 INFO pid=20887 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:40:38,295 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"log_type": "elb:accesslogs", "start_by_shell": "false", "aws_account": "IA Dev", "max_retries": "-1", "log_start_date": "2017-02-26", "bucket_region": "us-east-1", "bucket_name": "development-alb-private-logging", "index": "default", "interval": "30", "sourcetype": "aws:alb:accesslogs", "max_fails": "10000", "host": "splunkenterprise", "host_name": "s3.amazonaws.com"}
2017-02-27 19:40:38,295 INFO pid=20887 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:40:37,849 INFO pid=20887 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:40:20,699 INFO pid=20610 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:40:20,698 INFO pid=20610 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:40:18,893 INFO pid=20635 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:40:18,864 INFO pid=20635 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:40:12,941 INFO pid=20635 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:40:12,938 INFO pid=20635 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:40:12,641 INFO pid=20635 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:40:12,641 INFO pid=20635 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:40:12,640 INFO pid=20635 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:40:12,638 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:40:12,637 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:40:12,124 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:40:10,373 INFO pid=20610 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:40:10,363 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:40:10,263 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:40:10,261 INFO pid=20610 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:40:08,897 INFO pid=20610 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:40:08,843 INFO pid=20610 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:40:08,157 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"host_name": "s3.amazonaws.com", "index": "default", "interval": "30", "sourcetype": "aws:alb:accesslogs", "host": "splunkenterprise", "max_fails": "10000", "log_start_date": "2017-02-26", "bucket_region": "us-east-1", "bucket_name": "development-alb-private-logging", "start_by_shell": "false", "log_type": "elb:accesslogs", "aws_account": "IA Dev", "max_retries": "-1"}
2017-02-27 19:40:08,156 INFO pid=20610 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:40:07,794 INFO pid=20610 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:39:47,060 INFO pid=20339 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:39:47,060 INFO pid=20339 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:39:45,173 INFO pid=20364 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:39:45,154 INFO pid=20364 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:39:42,231 INFO pid=20364 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:39:42,228 INFO pid=20364 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:39:41,821 INFO pid=20364 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:39:41,821 INFO pid=20364 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:39:41,820 INFO pid=20364 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:39:41,817 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:39:41,816 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:39:41,535 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:39:40,753 INFO pid=20339 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:39:40,751 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:39:40,623 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:39:40,617 INFO pid=20339 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:39:39,607 INFO pid=20339 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:39:39,554 INFO pid=20339 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:39:38,447 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"index": "default", "host_name": "s3.amazonaws.com", "bucket_region": "us-east-1", "log_start_date": "2017-02-26", "bucket_name": "development-alb-private-logging", "host": "splunkenterprise", "max_retries": "-1", "start_by_shell": "false", "aws_account": "IA Dev", "interval": "30", "max_fails": "10000", "log_type": "elb:accesslogs", "sourcetype": "aws:alb:accesslogs"}
2017-02-27 19:39:38,446 INFO pid=20339 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:39:37,875 INFO pid=20339 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
2017-02-27 19:39:14,712 INFO pid=20048 tid=MainThread logger=splunksdc caller=collector.py:run:222 message="modular input exited"
2017-02-27 19:39:14,711 INFO pid=20048 tid=MainThread logger=splunksdc caller=collector.py:run:219 message="task not found."
2017-02-27 19:39:12,972 INFO pid=20094 tid=MainThread logger=splunksdc caller=collector.py:perform:237 message="task finished", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:39:12,941 INFO pid=20094 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:70 message="perform end"
2017-02-27 19:39:09,978 INFO pid=20094 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:39:09,976 INFO pid=20094 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_files:174 marker="AWSLogs/241939919832/elasticloadbalancing/us-east-1/2017/02/26/", message="s3 list files start", prefix="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:39:09,624 INFO pid=20094 tid=MainThread logger=splunk_aws_logs caller=handler.py:perform:47 message="perform start", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1", params="AWSLogs/241939919832/elasticloadbalancing/us-east-1/"
2017-02-27 19:39:09,623 INFO pid=20094 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:39:09,607 INFO pid=20094 tid=MainThread logger=splunksdc caller=collector.py:perform:229 message="task started", name="alb/awslogs_241939919832_elasticloadbalancing_us-east-1"
2017-02-27 19:39:09,604 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:43 message="prepare end"
2017-02-27 19:39:09,604 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=elb_access_logs.py:create_tasks:36 message="discover partitions done", partitions=["AWSLogs/241939919832/elasticloadbalancing/us-east-1/"]
2017-02-27 19:39:09,509 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/241939919832/elasticloadbalancing/"
2017-02-27 19:39:09,276 INFO pid=20048 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): development-alb-private-logging.s3.amazonaws.com"
2017-02-27 19:39:09,274 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:list_folders:163 message="s3 list folders start", prefix="AWSLogs/"
2017-02-27 19:39:09,196 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=handler.py:prepare:35 host="splunkenterprise", index="default", kind="splunk_ta_aws_logs", max_fails=10000, max_retries=-1, message="prepare started", name="alb", sourcetype="aws:alb:accesslogs"
2017-02-27 19:39:09,194 INFO pid=20048 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:182 arn="arn:aws:iam::241939919832:user/splunk_user", expiration="None", message="load credentials succeed"
2017-02-27 19:39:08,978 INFO pid=20048 tid=MainThread logger=botocore.vendored.requests.packages.urllib3.connectionpool caller=connectionpool.py:_new_conn:735 message="Starting new HTTPS connection (1): sts.amazonaws.com"
2017-02-27 19:39:08,953 INFO pid=20048 tid=MainThread logger=aws_credentials caller=aws_credentials.py:load:175 aws_account="IA Dev", aws_iam_role=null, message="begin loading credentials"
2017-02-27 19:39:08,175 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:load:269 kind="splunk_ta_aws_logs", message="start parse stanza", name="alb", params={"max_retries": "-1", "interval": "30", "index": "default", "start_by_shell": "false", "max_fails": "10000", "host": "splunkenterprise", "log_type": "elb:accesslogs", "host_name": "s3.amazonaws.com", "bucket_name": "development-alb-private-logging", "aws_account": "IA Dev", "bucket_region": "us-east-1", "sourcetype": "aws:alb:accesslogs", "log_start_date": "2017-02-26"}
2017-02-27 19:39:08,174 INFO pid=20048 tid=MainThread logger=splunk_aws_logs caller=splunk_ta_aws_logs.py:_setup_proxy_for_boto3:360 enabled=false, host=null, message="proxy settings", port=null, username=null
2017-02-27 19:39:07,723 INFO pid=20048 tid=MainThread logger=splunksdc caller=collector.py:run:209 message="modular input started"
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
klaxdal
Contributor
02-27-2017
07:30 PM
Don't think ALB is supported in this version of the app ( could be wrong but pretty sure )
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
nickhills
Ultra Champion
02-28-2017
01:45 AM
It seems your IAM user account can list the buckets, but are you sure you have granted permission to list & get bucket objects?
If my comment helps, please give it a thumbs up!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
nikki603
Engager
02-28-2017
06:47 AM
I did have s3:GetObject but just to rule it out, I attached a policy to my user
{
"Effect": "Allow",
"Action": "*",
"Resource": "*"
}
Still the same. It doesn't seem to find anything after "s3 list files start"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
klaxdal
Contributor
02-27-2017
07:30 PM
Don't think ALB is supported in this version of the app ( could be wrong but pretty sure )
Get Updates on the Splunk Community!
Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...
The Transformative Power of AI and ML in Enhancing Observability
In the realm of IT operations, the ...
.conf24 | Registration Open!
Hello, hello! I come bearing good news: Registration for .conf24 is now open!
conf is Splunk’s rad annual ...
ICYMI - Check out the latest releases of Splunk Edge Processor
Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.
HEC Receiver authorization ...
