All Apps and Add-ons

splunk addon for aws does not list s3 buckets

charry
Engager

I have configured my aws logging account with splunk. The logging account has a centralized s3 bucket for cloudtrail logs collection from all aws accounts in the organization. while i'm able to create a 'description' input and it shows the s3 buckets in the account, splunk does not detect any s3 buckets in the account when i try to configure a new input for either cloudtrail or custom-data with Generic S3 or Incremental S3. i've verified that my IAM user/role and bucket policies are correct by using the same user/role on aws cli to list buckets/objects etc. any suggestions please?

Tags (1)

jordanking1992
Path Finder

I am facing the same issue. Any solution?

0 Karma

jawaharas
Motivator

This should be due to Account permission issue in AWS. Regarding AWS account, are you Key ID/ Secret Key or Role-based access?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...