Splunk Add-on for Amazon Kinesis Firehose

Overview

Details

Ingesting data from AWS to Splunk Cloud? Have you tried the new Splunk Data Manager yet? Data Manager makes AWS data ingestion simpler, more automated and centrally managed for you, while co-existing with AWS and/or Kinesis TAs. Read our blog post to learn more about Data Manager and it’s availability on your Splunk Cloud instance: https://splk.it/3e9F863
__________________________________________________________________________________________________________

The Splunk Add-on for Amazon Kinesis Firehose allows a Splunk software administrator to collect AWS CloudTrail, VPC Flow Logs, CloudWatch events, and raw or JSON data from Amazon Kinesis Firehose. This add-on provides CIM-compatible knowledge for data collected via the HTTP event collector. After the Splunk platform indexes the events, you can analyze the data directly or using other Splunk apps, such as the Splunk App for AWS and Splunk Enterprise Security. If you want to collect data from other AWS sources, see Splunk Add-on for Amazon Web Services.

*** The Splunk Add-on for Amazon Kinesis Firehose is not compatible with the AWS GuardDuty Add-on

Documentation for this add-on may be found at http://docs.splunk.com/Documentation/AddOns/latest/Firehose/About

Release Notes

Version 1.3.2

Oct. 7, 2021

Version 1.3.2 of the Splunk Add-on for Amazon Kinesis Firehose contains the following new features:
- Common Information Model (CIM) version 4.20 compatibility and enhanced CIM mapping
- Enhanced CIM mapping for several sourcetypes
- Merging of Public Release and Internal Mustang Release to support Enterprise Security (ES) Cloud Security Dashboards content
See release documentation for more information: http://docs.splunk.com/Documentation/AddOns/latest/Firehose/About

Version 1.3.1r7d1d093

Nov. 30, 2020

Version 1.3.1 of the Splunk Add-on for Amazon Kinesis Firehose contains the following new features:
Increased Alerts CIM data model compatibility.
Increased Change CIM data model compatibility.
*Support for ingestion of AWS Security Hub findings events.

Version 1.2.2

July 21, 2020

This release for the Splunk Add-on for Kinesis Firehose v1.2.2 adds:
Increased Network Traffic CIM data model compatibility
Increased Change CIM data model compatibility
* General bug fixes

Version 1.2.1

April 28, 2020

This release for Splunk Add-on for Amazon Kinesis Firehose adds:
* Improved Support for the Authentication CIM Model.

Version 1.2.0

May 16, 2018

Version 1.1.1

Jan. 10, 2018

For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/AddOns/latest/Firehose/About

13,378

Downloads

Share Subscribe

Version

Built by

Splunk Inc.

Support

Splunk Supported Questions on Splunk Answers File a case Flag as inappropriate

Technologies: AWS