Hi All,
I know this question leans more to AWS support but I thought I would poll the community for any insight.
I have an EC2 (RHEL7 OS) rolling in AWS and I am in the midst of installing Splunk Enterprise.
I have some Splunk data saved in an S3 bucket, but I am apprehensive about mounting the S3 data to the EC2 instance. I am worried that if not done properly Splunk might overwrite the data in S3.
Does anyone have experience with this?
Are there any caveats regarding the way S3 needs to be connected to Splunk's OS?
I have seen two ways (so far) "IAM role to access S3 buckets" and "Fuse" to connect the data to the OS.
Has anyone successfully tried either way with Splunk?
Thank you
↧