Integrating with Splunk - AMS Advanced User Guide

Integrating with Splunk

AMS supports AWS Lambda-based push to customer log analytics services, such as Splunk.

AMS leverages the Splunk Add-on for Amazon Web services, which allows AWS data to be streamed to Splunk. See Hardware and software requirements.

Refer to this Splunk blog post How to stream AWS CloudWatch Logs to Splunk (Hint: it’s easier than you think). Because CloudWatch log streaming is enabled by default for AMS customers, and AMS configures the AWS Lambda function for you, though you need to configure the Splunk HTTP Event Collector (HEC) input and submit a request to AMS for the added functionality.

Here’s how the data input settings might look:

Splunk Add Data review page showing input settings for VPC Flow Logs via Lambda.