Cribl Search to query S3 bucket - "Error initializing task queue"

Question

Hi guys, we are trying to configure Cribl Search to query S3 bucket but have been facing error that says "Error initializing task queue" .... "Access Denied"We are seeing the Cribl Stream worker AssumeRole into our AWS account for the existing S3 Source Collector that we have configured previously but, we’re not seeing any Cloudtrail logs in our SIEM to show that the Cribl Search role (new role that we created in AWS to configure Cribl Search only) is able to AssumeRole into our account i.e we’re not seeing any STS logs in SIEM for Cribl Search role.Can anyone provide help on this?

Best answer by dritan

I am assuming you followed the steps here: https://docs.cribl.io/search/aws-access and here: https://docs.cribl.io/search/set-up-s3?

dritan · Accepted Answer

I am assuming you followed the steps here: https://docs.cribl.io/search/aws-access and here: https://docs.cribl.io/search/set-up-s3?

Tony R · Answer

From @Kam Amir  : You’re going to need to update the permissions for the role accessing your S3 bucket.

Sign up

Using your Cribl.Cloud account

Login to the community

Using your Cribl.Cloud account

Scanning file for viruses.

This file cannot be downloaded