So I did what you recommended to me. I did set up our search head and heavy forwarder by executing this command. However, it got more complicated for me. I want to understand HOW SH and HF are communicating with each other once this was executed. So my configured inputs that were there before were gone when I connected HF and SH. We did some test and we found out that whatever we configured on the GUI, gets written on the HF TA inputs.conf file, as well as the accounts. However, when I was adding role on the Add-on, that only gets written on SH. This is where we are so far. We configured some inputs, but we have more errors now than before, my cloudtrail works before, but now not at all. How do we configure our inputs? How do we make sure that this connection helps to make the AWS app work? Anyone else having this kind of same problem? I can't get any data at all. Please help me solve this issue
... View more