Splunk Add-on for Amazon Kinesis Firehose

Overview

Details

The Splunk Add-on for Amazon Kinesis Firehose allows a Splunk software administrator to collect AWS CloudTrail, VPC Flow Logs, CloudWatch events, and raw or JSON data from Amazon Kinesis Firehose. This add-on provides CIM-compatible knowledge for data collected via the HTTP event collector. After the Splunk platform indexes the events, you can analyze the data directly or using other Splunk apps, such as the Splunk App for AWS and Splunk Enterprise Security. If you want to collect data from other AWS sources, see Splunk Add-on for Amazon Web Services.

*** The Splunk Add-on for Amazon Kinesis Firehose is not compatible with the AWS GuardDuty Add-on

Documentation for this add-on may be found at http://docs.splunk.com/Documentation/AddOns/latest/Firehose/About

Release Notes

Version 1.3.1r7d1d093

Nov. 30, 2020

Version 1.3.1 of the Splunk Add-on for Amazon Kinesis Firehose contains the following new features:
Increased Alerts CIM data model compatibility.
Increased Change CIM data model compatibility.
*Support for ingestion of AWS Security Hub findings events.

Version 1.2.2

July 21, 2020

This release for the Splunk Add-on for Kinesis Firehose v1.2.2 adds:
Increased Network Traffic CIM data model compatibility
Increased Change CIM data model compatibility
* General bug fixes

Version 1.2.1

April 28, 2020

This release for Splunk Add-on for Amazon Kinesis Firehose adds:
* Improved Support for the Authentication CIM Model.

Version 1.2.0

May 16, 2018

Version 1.1.1

Jan. 10, 2018

For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/AddOns/latest/Firehose/About

7,825

Installs

9,297

Downloads

Share Subscribe

Version

Built by

Splunk Inc.

Support

Splunk Supported Questions on Splunk Answers File a case Flag as inappropriate

Technologies: AWS