splunk
AWS SQS Poller
This app has been archived. Learn more about app archiving.
This app is NOT supported by Splunk. Please read about what that means for you here.
Overview
Details
This add-on allows users to index data for an AWS SQS queue. Users can create their own data handlers to parse data if needed.
For bugs and feature requests:
https://github.com/httpstergeek/splunk-sqs/issues
For bugs and feature requests:
https://github.com/httpstergeek/splunk-sqs/issues
splunk-sqs
AWS sqs collector for Splunk
Setup
- Clone the Project from Github.
- Copy the full
splunk-sqs/sqs_pollerfolder to$SPLUNK_HOME/etc/apps. - Navigate to
$SPLUNK_HOME/etc/apps/sqs_poller/bin/appsRunnpm install. - Restart Splunk
OR
Download from apps.splunk.com
Adding an input
- From Splunk Home, click the Settings menu. Under Data, click Data inputs, and find
SQS, the input you just added. Click Add new on that row. - Click Add new and fill in:
queueUrl(SQS queue URL. example https://sqs.us-west-1.amazonaws.com/84354864321/mySQS)region(AWS region)accessKeyId(accessKeyId for account. example AIIMOFM3VBOHOPU2A)secretAccessKey(secretAccessKey for account. example eP6CfTUCP6apPajPpJ452Id9Ffc7zlUZz8zr)MaxNumberOfMessages(MaxNumberOfMessages to retrieve from queue defaults to 3 max is 10)VisibilityTimeout(VisibilityTimeout the duration in seconds that the received messages are hidden from subsequent retrieve requests after being retrieved by a ReceiveMessage request)sleepTime(sleepTime is the duration to sleep while queue is empty. defauts to 1 second)WaitTimeSeconds(WaitTimeSeconds the duration (in seconds) for which the call will wait for a message to arrive in the queue before returning. If a message is available, the call will return sooner than WaitTimeSeconds)- (optional)
interval(How many second between scheduling)
- Save your input, and navigate back to Splunk Home.
NOTES:
* ensure aws account was ability to read and delete message from queue
Release Notes
Version 1.0
Dec. 7, 2015
General AWS sqs poller. First release