Sending data to Splunk

In this topic you can learn how to use the Insights real-time data export feature with AWS SQS to send data to Splunk and use it there.

Note:

• Configure real-time data export before configuring Splunk reporting.
• Set up AWS SQS

• Splunk Enterprise version 9.0.0 and higher.
• Splunk Enterprise deployed inside a Docker container (documentation version 9.0.0).
• Splunk Add-on for Microsoft Cloud Service to consume data through Event Hubs.

Configure Splunk integration with AWS SQS

To configure Splunk as a monitoring tool, you first need to install Splunk Add-on for AWS from the Splunk MarketPlace.

Follow the official Splunk documentation for configuration instructions.