![]() ![]() To ingest a specific type of log, configure the corresponding dedicated input designed to collect the log type. The SQS-based S3 input type is the recommended option because it is more scalable and provides higher ingestion performance. ![]() For example, CloudTrail logs can be collected using any of the following input types: CloudTrail, S3, or SQS-based S3. Some data types can be ingested using either a dedicated input type or a multi-purpose input type. Multi-purpose input types to collect multiple data types from the S3 bucket.Designed to ingest one specific data type Dedicated, or single-purpose input types.The Splunk Add-on for AWS provides two categories of input types to gather useful data from your AWS environment: SQS-based S3 is the best practice input type to use for all of its collectible data types. For example, collect historical logs as opposed to only collect newly created logs. The following matrix lists all the data types that can be collected using the Splunk Add-on for AWS and the corresponding input types that you can configure to collect this data.įor some data types, the Splunk Add-on for AWS provides you with the flexibility to choose from multiple input types based on specific requirements. ![]() Supported data types and corresponding AWS input types
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |