lundi 24 août 2015

AWS App for Splunk sourcetype not showing in Splunk

I created the data input for AWSConfig by modifying inputs.conf file but I dont see sourcetype aws:config created under Splunk. The AWSConfig messages are sitting in the SQS queue which means Splunk is not polling from the queue. Any idea what the issue is? how do I troubleshoot the issue?




Aucun commentaire:

Enregistrer un commentaire