GitHub Repo

AWS Data Sources

Name Platform Sourcetype Source Supported TA Date
AWS CloudTrail DeleteLoggingConfiguration AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteRuleGroup AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DescribeSnapshotAttribute AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
ASL AWS CloudTrail AWS icon AWS aws:asl aws_asl Splunk Add-on for AWS
AWS Cloudfront AWS icon AWS aws:cloudfront:accesslogs aws Splunk Add-on for AWS
AWS CloudTrail AssumeRoleWithSAML AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail ConsoleLogin AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail CopyObject AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail CreateAccessKey AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail CreateKey AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail CreateLoginProfile AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail CreateNetworkAclEntry AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail CreatePolicyVersion AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail CreateSnapshot AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail CreateTask AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail CreateVirtualMFADevice AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeactivateMFADevice AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteAccountPasswordPolicy AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteAlarms AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteDetector AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteGroup AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteIPSet AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteLogGroup AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteLogStream AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteNetworkAclEntry AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeletePolicy AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteRule AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteSnapshot AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteTrail AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteVirtualMFADevice AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DeleteWebACL AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DescribeEventAggregates AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail DescribeImageScanFindings AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail GetAccountPasswordPolicy AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail GetObject AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail GetPasswordData AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail JobCreated AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail ModifyDBInstance AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail ModifyImageAttribute AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail ModifySnapshotAttribute AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail PutBucketAcl AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail PutBucketLifecycle AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail PutBucketReplication AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail PutBucketVersioning AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail PutImage AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail PutKeyPolicy AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail ReplaceNetworkAclEntry AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail SetDefaultPolicyVersion AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail StopLogging AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail UpdateAccountPasswordPolicy AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail UpdateLoginProfile AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail UpdateSAMLProvider AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudTrail UpdateTrail AWS icon AWS aws:cloudtrail aws_cloudtrail Splunk Add-on for AWS
AWS CloudWatchLogs VPCflow AWS icon AWS aws:cloudwatchlogs:vpcflow aws_cloudwatchlogs_vpcflow Splunk Add-on for AWS
AWS Security Hub AWS icon AWS aws:securityhub:finding aws_securityhub_finding Splunk Add-on for AWS
GitHub Webhooks AWS icon AWS aws:firehose:json github 
        </td>
        <td class="col-5">
        </td>
    </tr>
    <tr class="row">
        <td class="col-0">
            <a href="/sources/e8ace6db-1dbd-4c72-a1fb-334684619a38/">AWS CloudTrail</a>
        </td>
        <td class="col-1">
                <img src="https://research.splunk.com/icons/aws.svg" alt="AWS icon" class="icon-tiny">
              AWS
        </td>
        <td class="col-2">
            aws:cloudtrail
        </td>
        <td class="col-3">
            aws_cloudtrail
        </td>
        <td class="col-4">
            <a href="https://splunkbase.splunk.com/app/1876">Splunk Add-on for AWS</a>
        </td>
        <td class="col-5">
        </td>
    </tr>
    <tr class="row">
        <td class="col-0">
            <a href="/sources/2f6e9d7a-1c53-48b1-be57-33a91e0f8c42/">AWS CloudTrail DeleteGuardrail</a>
        </td>
        <td class="col-1">
                <img src="https://research.splunk.com/icons/aws.svg" alt="AWS icon" class="icon-tiny">
              AWS
        </td>
        <td class="col-2">
            aws:cloudtrail
        </td>
        <td class="col-3">
            aws_cloudtrail
        </td>
        <td class="col-4">
            <a href="https://splunkbase.splunk.com/app/1876">Splunk Add-on for AWS</a>
        </td>
        <td class="col-5">
        </td>
    </tr>
    <tr class="row">
        <td class="col-0">
            <a href="/sources/a8c47f25-5693-4d1a-9f8b-6e94d15ac2d9/">AWS CloudTrail DeleteKnowledgeBase</a>
        </td>
        <td class="col-1">
                <img src="https://research.splunk.com/icons/aws.svg" alt="AWS icon" class="icon-tiny">
              AWS
        </td>
        <td class="col-2">
            aws:cloudtrail
        </td>
        <td class="col-3">
            aws_cloudtrail
        </td>
        <td class="col-4">
            <a href="https://splunkbase.splunk.com/app/1876">Splunk Add-on for AWS</a>
        </td>
        <td class="col-5">
        </td>
    </tr>
    <tr class="row">
        <td class="col-0">
            <a href="/sources/fe2b3a52-1c8d-4e17-9f74-76c531a87e21/">AWS CloudTrail DeleteModelInvocationLoggingConfiguration</a>
        </td>
        <td class="col-1">
                <img src="https://research.splunk.com/icons/aws.svg" alt="AWS icon" class="icon-tiny">
              AWS
        </td>
        <td class="col-2">
            aws:cloudtrail
        </td>
        <td class="col-3">
            aws_cloudtrail
        </td>
        <td class="col-4">
            <a href="https://splunkbase.splunk.com/app/1876">Splunk Add-on for AWS</a>
        </td>
        <td class="col-5">
        </td>
    </tr>
    <tr class="row">
        <td class="col-0">
            <a href="/sources/5d92a1b6-3e78-4ff2-be83-7a4c01f9df6c/">AWS CloudTrail InvokeModel</a>
        </td>
        <td class="col-1">
                <img src="https://research.splunk.com/icons/aws.svg" alt="AWS icon" class="icon-tiny">
              AWS
        </td>
        <td class="col-2">
            aws:cloudtrail
        </td>
        <td class="col-3">
            aws_cloudtrail
        </td>
        <td class="col-4">
            <a href="https://splunkbase.splunk.com/app/1876">Splunk Add-on for AWS</a>
        </td>
        <td class="col-5">
        </td>
    </tr>
    <tr class="row">
        <td class="col-0">
            <a href="/sources/e7f31c68-84b9-4d21-a8c5-ec9d2fb3a457/">AWS CloudTrail ListFoundationModels</a>
        </td>
        <td class="col-1">
                <img src="https://research.splunk.com/icons/aws.svg" alt="AWS icon" class="icon-tiny">
              AWS
        </td>
        <td class="col-2">
            aws:cloudtrail
        </td>
        <td class="col-3">
            aws_cloudtrail
        </td>
        <td class="col-4">
            <a href="https://splunkbase.splunk.com/app/1876">Splunk Add-on for AWS</a>
        </td>
        <td class="col-5">
        </td>
    </tr>
</tbody>