name: cloudtrail id: c9057c85-5db9-42d6-85e3-aeab0483aabf version: 1 creation_date: '2020-04-30' modification_date: '2026-05-13' author: Splunk Threat Research Team description: customer specific splunk configurations(eg- index, source, sourcetype). Replace the macro definition with configurations for your Splunk Environment. definition: sourcetype=aws:cloudtrail