I have my aws TA configured with an account and input. It has been running for an hour now but no data is seen in the index.
I don't see any errors in the logs, splunkd.log or for splunk_ta_aws_generic_aws_s3_input-name.log?
The bucket is huge, approx 2 TB, and I configured the input to start at 4/15/2018 and end at 8/15/2018...
Is a huge delay normal in this scenario, or is it not communicating with s3 correctly? Anything to look for in particular?
Thank you