Detect Spike In S3 Bucket Deletion
This search detects users creating spikes in API activity related to deletion of S3 buckets in your AWS environment. It will also update the cache file that factors in the latest data.
This content is not mapped to any local saved search. Add mapping
Detect Spike In S3 Bucket Deletion Help
You must install the AWS App for Splunk (version 5.1.0 or later) and Splunk Add-on for AWS (version 4.4.0 or later), then configure your CloudTrail inputs. You can modify
Open in Search