Splunk Add-on for Amazon Web Services
Splunk Built
Admins: Please read about Splunk Enterprise 8.0 and the Python 2.7 end-of-life changes and impact on apps and upgradeshere.
Overview
Details
The Splunk Add-on for Amazon Web Services allows a Splunk software administrator to collect:
* Configuration snapshots, configuration changes, and historical configuration data from the AWS Config service.
* Metadata for your AWS EC2 instances, reserved instances, and EBS snapshots.
* Compliance details, compliance summary, and evaluation status of your AWS Config Rules.
* Assessment Runs and Findings data from the Amazon Inspector service.
* Management and change events from the AWS CloudTrail service.
* VPC flow logs and other logs from the CloudWatch Logs service.
* Performance and billing metrics from the AWS CloudWatch service.
* Billing reports that you have configured in AWS.
* S3, CloudFront, and ELB access logs.
* Generic data from your S3 buckets.
* Generic data from your Kinesis streams.
* Generic data from SQS.
This add-on provides modular inputs and CIM-compatible knowledge to use with other apps, such as the Splunk App for AWS, Splunk Enterprise Security and Splunk IT Service Intelligence.
Version 5.0.0 of the Splunk Add-on for AWS is compatible only with Splunk Enterprise version 8.0.0 and above.
* Configuration snapshots, configuration changes, and historical configuration data from the AWS Config service.
* Metadata for your AWS EC2 instances, reserved instances, and EBS snapshots.
* Compliance details, compliance summary, and evaluation status of your AWS Config Rules.
* Assessment Runs and Findings data from the Amazon Inspector service.
* Management and change events from the AWS CloudTrail service.
* VPC flow logs and other logs from the CloudWatch Logs service.
* Performance and billing metrics from the AWS CloudWatch service.
* Billing reports that you have configured in AWS.
* S3, CloudFront, and ELB access logs.
* Generic data from your S3 buckets.
* Generic data from your Kinesis streams.
* Generic data from SQS.
This add-on provides modular inputs and CIM-compatible knowledge to use with other apps, such as the Splunk App for AWS, Splunk Enterprise Security and Splunk IT Service Intelligence.
Version 5.0.0 of the Splunk Add-on for AWS is compatible only with Splunk Enterprise version 8.0.0 and above.
Documentation for this add-on may be found at http://docs.splunk.com/Documentation/AddOns/latest/AWS/Description
Release Notes
Version 5.0.0
Dec. 18, 2019
Splunk Add-on for Amazon Web Services 5.0.0. Copyright (C) 2005-2019 Splunk Inc. All rights reserved.
https://docs.splunk.com/Documentation/AddOns/released/AWS/Releasenotes
Version 4.6.1
Dec. 10, 2019
Documentation can be found at https://docs.splunk.com/Documentation/AddOns/released/AWS/Releasenotes
Version 4.5.0
Feb. 28, 2018
Splunk Add-on for Amazon Web Services 4.5.0. Copyright (C) 2005-2018 Splunk Inc. All rights reserved.