Splunk Add-on for Amazon Kinesis Firehose
Splunk Built
Admins: Please read about Splunk Enterprise 8.0 and the Python 2.7 end-of-life changes and impact on apps and upgradeshere.
Overview
Details
The Splunk Add-on for Amazon Kinesis Firehose allows a Splunk software administrator to collect AWS CloudTrail, VPC Flow Logs, CloudWatch events, and raw or JSON data from Amazon Kinesis Firehose. This add-on provides CIM-compatible knowledge for data collected via the HTTP event collector. After the Splunk platform indexes the events, you can analyze the data directly or using other Splunk apps, such as the Splunk App for AWS and Splunk Enterprise Security. If you want to collect data from other AWS sources, see Splunk Add-on for Amazon Web Services.
*** The Splunk Add-on for Amazon Kinesis Firehose is not compatible with the AWS GuardDuty Add-on
*** The Splunk Add-on for Amazon Kinesis Firehose is not compatible with the AWS GuardDuty Add-on
Documentation for this add-on may be found at http://docs.splunk.com/Documentation/AddOns/latest/Firehose/About
Release Notes
Version 1.2.0
May 16, 2018
Version 1.1.1
Jan. 10, 2018
Splunk Add-on for Amazon Kinesis Firehose 1.1.1. Copyright (C) 2018 Splunk Inc. All rights reserved.
For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/AddOns/latest/Firehose/About