splunk
AWS Lambda Alert Action
Splunk Cloud
Overview
Details
The AWS Lambda App for Splunk Enterprise provides custom alert action and dashboard for AWS Lambda Function triggered via splunk. Dashboard show count of lambda function triggered and contains custom drill-downs.
AWS Lambda lets you run code without provisioning or managing servers. With Lambda, you can run code for virtually any type of application or backend service - all with zero administration. Just upload your code and Lambda takes care of everything required to run and scale your code with high availability. You can set up your code to automatically trigger from other AWS services or call it directly from any web or mobile app.
Add-on Details:
The Simple Mail Transfer Protocol is a communication protocol for electronic mail transmission. That's why to send your messages with an email client or software you need first of all to configure the correct SMTP settings – in particular, the right SMTP address.
SMTP add-on provides sourcetype to extract SMTP IIS logs in w3c Format and build visualization, this add-on is also compatible for advance option selection and thus extraction in w3c format. It also eliminates extraction issue's found in Splunk Add-on for Microsoft IIS.
Using this App:
When an alert is triggered,It will automatically call the respective AWS Lambda function. AWS lambda function will provide a response which can be visible in splunk dashboard. Splunk Admin can easily track counts of AWS Lambda triggered via Splunk Dashboard.
This add-on must be configured before use. Click Configuration to supply the required settings.
Parameters required for configuring AWS Add-On :
1. Access Key
2. Secret Key
3. Environment
Parameters required for AWS Alert Action :
- Lambda Function Name
- Payload
- Region
- Environment
Dashboard:
Dashboard Shows Following Informaton
- Count of successfully triggered Lambda Function
- Detailed overview of successfully triggered Lambda Function
- Payload details
- Count of failed Lambda Function
Contact US
Email: support@avotrix.com
Release Notes
Version 2.0.0
Feb. 28, 2022
Added compatibility to splunk cloud
Version 1.0.0
Sept. 20, 2020