Splunk Add-on for Amazon Web Services

Overview

Details

The Splunk Add-on for Amazon Web Services allows a Splunk software administrator to collect:
* Configuration snapshots, configuration changes, and historical configuration data from the AWS Config service.
* Metadata for your AWS EC2 instances, reserved instances, and EBS snapshots.
* Compliance details, compliance summary, and evaluation status of your AWS Config Rules.
* Assessment Runs and Findings data from the Amazon Inspector service.
* Management and change events from the AWS CloudTrail service.
* VPC flow logs and other logs from the CloudWatch Logs service.
* Performance and billing metrics from the AWS CloudWatch service.
* Billing reports that you have configured in AWS.
* S3, CloudFront, and ELB access logs.
* Generic data from your S3 buckets.
* Generic data from your Kinesis streams.
* Generic data from SQS.

This add-on provides modular inputs and CIM-compatible knowledge to use with other apps, such as the Splunk App for AWS, Splunk Enterprise Security and Splunk IT Service Intelligence.

Versions 5.0.0 and later of the Splunk Add-on for AWS is compatible only with Splunk Enterprise version 8.0.0 and above.

Documentation for this add-on may be found at http://docs.splunk.com/Documentation/AddOns/latest/AWS/Description

Release Notes

Version 5.0.3

Oct. 5, 2020

[Bug fix] Proxy behavior not working as expected, no_proxy has been taking effect with https.
[Bug fix] Upgrading library httplib2 to 0.18.1;
[Bug fix] Code fix in the SQS modular input for proxy configuration [Windows. only]

Version 5.0.2

Aug. 24, 2020

This release for the Splunk Add-on for AWS v5.0.2 adds:
* Increased Network Traffic CIM data model compatibility
* Increased Change CIM data model compatibility
* Improved Support for the Enterprise Security Assets & Identities Framework Interface
* General Bug Fixes

For more information on fixes please visit:
https://docs.splunk.com/Documentation/AddOns/released/AWS/Releasenotes

Version 5.0.1

April 30, 2020

This release for Splunk Add-on for Amazon Web Services adds:
[General] FIPS compliance release for Python 3.
[General] Improved Support for the Authentication CIM Model.
[General] Bug Fixes.

For more information on fixes please visit:
https://docs.splunk.com/Documentation/AddOns/released/AWS/Releasenotes

Version 5.0.0

Dec. 18, 2019

Splunk Add-on for Amazon Web Services 5.0.0. Copyright (C) 2005-2019 Splunk Inc. All rights reserved.

https://docs.splunk.com/Documentation/AddOns/released/AWS/Releasenotes

Version 4.6.1

Dec. 10, 2019

Documentation can be found at https://docs.splunk.com/Documentation/AddOns/released/AWS/Releasenotes

Version 4.5.0

Feb. 28, 2018

13,624

Installs

78,639

Downloads

Share Subscribe

Version

Built by

Splunk Inc.

Support

Splunk Supported Questions on Splunk Answers File a case Flag as inappropriate

Technologies: AWS

App Contents: Inputs, Alert Actions

App Contents: Alert Actions, Inputs