Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How do you set up user name information in the Splunk App for AWS?

$
0
0
I have Splunk App for AWS in Splunk. I'm having issues with Configuration Updates in the app. I can see change events when a user creates, updates, or deletes something in AWS. What I can't see is who is making one of those changes. It should be noted that we use AWS Directory Service AW connector to facilitate user access to AWS. The odd part is that when I look at the CloudTrail logs, I can see who is making the change, but I can't see it in Splunk. Any Ideas as to what I'm missing in the config of this app or in the setup process of AWS?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>