AWS S3 Splunk CII Integration

2025.07.28

COMING SOON

This method of integration is currently in development and will be released in an upcoming version of the CII module of the Cisco Security Cloud app for Splunk.

Overview

To establish an integration between Splunk and Cisco Identity Intelligence, please refer to the setup guide section in this document. This integration method utilizes the Splunk Add-on for AWS to ingest log data from your AWS S3 bucket. This method is frequently employed for batch processing of historical or high-volume log data. It requires setting up AWS credentials and the accurate specification of the SQS queue region and URL.