<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Splunk image on openshift 4.3 and integration with it in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-image-on-openshift-4-3-and-integration-with-it/m-p/465908#M80304</link>
    <description>&lt;P&gt;Hi,&lt;BR /&gt;
    I have a requirement for our project where in splunk container has to  deployed in openshift 4.3 and integrate it with openshift 4.3 so that all the logs can be seen in splunk. I have 2 queries&lt;BR /&gt;
1. regarding deployment of splunk on openshift 4.3&lt;BR /&gt;
2. Integration of splunk so that all the logs of openshift will be forwarded to splunk.&lt;/P&gt;

&lt;P&gt;1.I pulled the docker image of splunk in standalone instance of aws cloud and it is running fine and able to login&lt;/P&gt;

&lt;P&gt;When I deploy the same image in the openshift it is throwing an error : i even configured SPLUNK_HOME as /opt/splunk&lt;BR /&gt;
below is the error&lt;BR /&gt;
 sh: /opt/container_artifact/splunk-container.state: Permission denied&lt;BR /&gt;
In the debug terminal also I cannot find a file splunk-container.state in /opt/container_artifact/ folder&lt;BR /&gt;
and&lt;BR /&gt;
In opt/splunk/etc also their is not splunk-launch.config.&lt;/P&gt;

&lt;P&gt;Couldn't read "/opt/splunk/etc/splunk-launch.conf" -- maybe $SPLUNK_HOME or $SPLUNK_ETC is set wrong&lt;/P&gt;

&lt;P&gt;What has to be done to bypass this error and deploy the splunk?&lt;/P&gt;

&lt;OL&gt;
&lt;LI&gt;Is there any documentation available on splunk side on the steps to be carried to integrate splunk in openshift 4.3?&lt;/LI&gt;
&lt;/OL&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
SRK&lt;/P&gt;</description>
    <pubDate>Wed, 30 Sep 2020 04:51:46 GMT</pubDate>
    <dc:creator>splunkksr</dc:creator>
    <dc:date>2020-09-30T04:51:46Z</dc:date>
    <item>
      <title>Splunk image on openshift 4.3 and integration with it</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-image-on-openshift-4-3-and-integration-with-it/m-p/465908#M80304</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;
    I have a requirement for our project where in splunk container has to  deployed in openshift 4.3 and integrate it with openshift 4.3 so that all the logs can be seen in splunk. I have 2 queries&lt;BR /&gt;
1. regarding deployment of splunk on openshift 4.3&lt;BR /&gt;
2. Integration of splunk so that all the logs of openshift will be forwarded to splunk.&lt;/P&gt;

&lt;P&gt;1.I pulled the docker image of splunk in standalone instance of aws cloud and it is running fine and able to login&lt;/P&gt;

&lt;P&gt;When I deploy the same image in the openshift it is throwing an error : i even configured SPLUNK_HOME as /opt/splunk&lt;BR /&gt;
below is the error&lt;BR /&gt;
 sh: /opt/container_artifact/splunk-container.state: Permission denied&lt;BR /&gt;
In the debug terminal also I cannot find a file splunk-container.state in /opt/container_artifact/ folder&lt;BR /&gt;
and&lt;BR /&gt;
In opt/splunk/etc also their is not splunk-launch.config.&lt;/P&gt;

&lt;P&gt;Couldn't read "/opt/splunk/etc/splunk-launch.conf" -- maybe $SPLUNK_HOME or $SPLUNK_ETC is set wrong&lt;/P&gt;

&lt;P&gt;What has to be done to bypass this error and deploy the splunk?&lt;/P&gt;

&lt;OL&gt;
&lt;LI&gt;Is there any documentation available on splunk side on the steps to be carried to integrate splunk in openshift 4.3?&lt;/LI&gt;
&lt;/OL&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
SRK&lt;/P&gt;</description>
      <pubDate>Wed, 30 Sep 2020 04:51:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Splunk-image-on-openshift-4-3-and-integration-with-it/m-p/465908#M80304</guid>
      <dc:creator>splunkksr</dc:creator>
      <dc:date>2020-09-30T04:51:46Z</dc:date>
    </item>
  </channel>
</rss>

