Currently I am using the “CloudWatch Logs to Splunk” (splunk-cloudwatch-logs-processor) Lambda blueprint from AWS console. Below is the code for for splunk logging in lambda
const loggerConfig = {
url: process.env.SPLUNK_HEC_URL,
token: process.env.SPLUNK_HEC_TOKEN,
};
const SplunkLogger = require('./lib/mysplunklogger');
const zlib = require('zlib');
const logger = new SplunkLogger(loggerConfig);
I am getting error data channel is missing.
1)How do i configure data channel in lambda? What other changes have to be made on splunk side and aws lambda side to have successful communication between lambda and aws.
2)What are the disadvantages of disabling data channel on splunk side? Communication is going through after disabling. But I want to know the best practice.