splunk
Splunk Add-on for Amazon Kinesis Firehose
Splunk Cloud
Splunk Built
Overview
Details
Important Update: With the next release of Splunk Add-on for Amazon Web Services (aws) v6.0.0, we are merging all the capabilities of the Splunk Add-on for Amazon Kinesis Firehose into the Splunk Add-on for AWS. This means with the Splunk add-on for AWS v6.0.0, customers will be able to use a single Add-on across all AWS data sources for ingesting AWS data into Splunk. If you are using the Splunk Add-on for Kinesis Firehose as well as the Add-on for AWS with your Splunk instance, then you must uninstall the Kinesis Firehose Add-on before upgrading the Add-on for AWS to version 6.0.0 to avoid any data duplicacy and discrepancy issues. We encourage all customers who have a use case for Kinesis Firehose to adopt the Splunk Add-on for AWS v6.0.0 as soon as it is available as the Splunk Add-on for Kinesis Firehose will be discontinued in the future.
__________________________________________________________________________________________________________
The Splunk Add-on for Amazon Kinesis Firehose allows a Splunk software administrator to collect AWS CloudTrail, VPC Flow Logs, CloudWatch events, and raw or JSON data from Amazon Kinesis Firehose. This add-on provides CIM-compatible knowledge for data collected via the HTTP event collector. After the Splunk platform indexes the events, you can analyze the data directly or using other Splunk apps, such as the Splunk App for AWS and Splunk Enterprise Security. If you want to collect data from other AWS sources, see Splunk Add-on for Amazon Web Services.
*** The Splunk Add-on for Amazon Kinesis Firehose is not compatible with the AWS GuardDuty Add-on
__________________________________________________________________________________________________________
The Splunk Add-on for Amazon Kinesis Firehose allows a Splunk software administrator to collect AWS CloudTrail, VPC Flow Logs, CloudWatch events, and raw or JSON data from Amazon Kinesis Firehose. This add-on provides CIM-compatible knowledge for data collected via the HTTP event collector. After the Splunk platform indexes the events, you can analyze the data directly or using other Splunk apps, such as the Splunk App for AWS and Splunk Enterprise Security. If you want to collect data from other AWS sources, see Splunk Add-on for Amazon Web Services.
*** The Splunk Add-on for Amazon Kinesis Firehose is not compatible with the AWS GuardDuty Add-on
Documentation for this add-on may be found at http://docs.splunk.com/Documentation/AddOns/latest/Firehose/About
Release Notes
Version 1.3.2
Oct. 7, 2021
Version 1.3.2 of the Splunk Add-on for Amazon Kinesis Firehose contains the following new features:
- Common Information Model (CIM) version 4.20 compatibility and enhanced CIM mapping
- Enhanced CIM mapping for several sourcetypes
- Merging of Public Release and Internal Mustang Release to support Enterprise Security (ES) Cloud Security Dashboards content
See release documentation for more information: http://docs.splunk.com/Documentation/AddOns/latest/Firehose/About
Version 1.3.1r7d1d093
Nov. 30, 2020
Version 1.3.1 of the Splunk Add-on for Amazon Kinesis Firehose contains the following new features:
Increased Alerts CIM data model compatibility.
Increased Change CIM data model compatibility.
*Support for ingestion of AWS Security Hub findings events.
Version 1.2.2
July 21, 2020
This release for the Splunk Add-on for Kinesis Firehose v1.2.2 adds:
Increased Network Traffic CIM data model compatibility
Increased Change CIM data model compatibility
* General bug fixes
Version 1.2.1
April 28, 2020
This release for Splunk Add-on for Amazon Kinesis Firehose adds:
* Improved Support for the Authentication CIM Model.
Version 1.2.0
May 16, 2018
Version 1.1.1
Jan. 10, 2018
Splunk Add-on for Amazon Kinesis Firehose 1.1.1. Copyright (C) 2018 Splunk Inc. All rights reserved.
For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/AddOns/latest/Firehose/About