All Apps and Add-ons

Unable to use Splunk local endpoint as cloudwatch destination

karthi25
Path Finder

I am working with streaming cloudwatch logs to splunk. Splunk is my local instance with SSL enabled. I am trying to make my splunk local endpoint as destination to firehose delivery stream as follows:

alt text

and in the command line am creating cloudwatch destination

aws logs put-destination --destination-name "awslogs-destination-splunk" --target-arn "arn:aws:firehose:us-east-1:arnno:deliverystream/firehose-splunk-delivery-stream" --role-arn "arn:aws:iam::arnno:role/cw-to-kinesis-role"

but it showing me the error as follows:

An error occurred (InvalidParameterException) when calling the PutDestination op
eration: Could not deliver test message to specified destination. Check if the d
estination is valid.

What am doing wrong here.Can anyone please suggest me the solution for it.

0 Karma

toddwpiper
Engager

Hi, did you ever figure this one out? I have the same issue.

0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...