Establish resources on your AWS account

Set up resources in your AWS account to initiate data flow using AWS CLI or AWS Console.

After you create an input with a custom source type, you can set up resources in your AWS account to start the data flow. You can use the AWS CLI or AWS Console.
You created data input with a custom source type for Amazon S3. For more information, see Create input for custom source types for Amazon S3
  1. Log into Splunk Cloud Platform and select Apps > Data Manager.
  2. On the Data Management page, select a data input name, then select the AWS Setup Details tab.
  3. Select IAM Role Template to download the CloudFormation stack template.
  4. Choose a method to run the template on your account and region. The result is the same no matter which option you choose:
    OptionDescription
    CLISee Run the template on CLI.
    AWS ConsoleSee Run the template on AWS Console.
  5. Wait for the stack to have the CREATE_COMPLETE status, which indicates successful creation.

On the Data Management page, you can check if data is being collected.

Run the template on CLI

After you create an input with a custom source type, set up resources in your AWS account to start the data flow.

After you create an input with a custom source type, set up resources in your AWS account to start the data flow. See Establish resources on your AWS account.
  1. Open a Linux shell that supports AWS CLI version 2, such as bash, csh, or tcsh, to run commands in Linux or MacOS.
  2. Prepare the terminal to use the AWS credentials that allow you to run the following CLI commands. You can go to Data Input Details and select Refresh to see the status at any time.
  3. From the directory where you saved the latest data ingestion template, run the following commands to apply the downloaded template and verify that the stack creation is complete: 
    aws cloudformation create-stack --stack-name SplunkDMSqsS3-56cee6f8-1d1f-47a5-a8b6-c9947afc2a93 --region us-east-1 --template-body file://splunkdm-s3-input-56cee6f8-1d1f-47a5-a8b6-c9947afc2a93-1.json --tags Key=SplunkDMVersion,Value=1 --capabilities CAPABILITY_NAMED_IAM 
    ws cloudformation describe-stacks --stack-name SplunkDMSqsS3-56cee6f8-1d1f-47a5-a8b6-c9947afc2a93 --region us-east-1
Your template was successfully created.

Run the template on AWS Console

After you create an input with a custom source type, set up resources in your AWS account to start the data flow.

After you create an input with a custom source type, set up resources in your AWS account to start the data flow. See Establish resources on your AWS account.
  1. Log into your AWS account and go to CloudFormation Service.
  2. Select the us-east-1 region.
  3. Select Create stack, then from the drop-down list select With new resources.
  4. Update the following fields:
    OptionDescription
    In the Prepare template sectionSelect Template is ready.
    In the Specify Template sectionSelect Upload a template file.
  5. Select Choose file, and choose the previously downloaded template, and then select Next.
  6. Enter the stack name: SplunkDMSqsS3-56cee6f8-1d1f-47a5-a8b6-c9947afc2a93
  7. Leave Parameters as No parameters, and then select Next.
  8. To specify tags, enter Key: SplunkDMVersion and enter Value: 1, and then select Next.
  9. Review your entries and check the box under Capabilities to provide your acknowledgment.
  10. Select Submit.
Your template was successfully created.