https://community.splunk.com/t5/Getting-Data-In/Nginx-Logs-from-Kubernertes-Containers/m-p/529552#M89208 <P>hi guys,</P><P>forgive the n00bness of this question as im sure its fairly straightforward and/or been answered before.</P><P>So im just in the process of rolling out Splunk to the business. One of the key requirements is parsing our Nginx logs. Now im able to do this easily from a standard Linux box using a deployment server. However, all our websites are moving to Kubernetes so im wondering what's the best way that i can get the data from the nginx containers/pods to Splunk. Obviously adding the UF to the docker image for every microservice would be overkill as i want to keep the images as lean as possible. Am i right thats not the best way to do this?</P><P>&nbsp;</P><P>Thanks!</P> Mon, 16 Nov 2020 14:50:54 GMT stuartcooney 2020-11-16T14:50:54Z https://community.splunk.com/t5/Getting-Data-In/Nginx-Logs-from-Kubernertes-Containers/m-p/529552#M89208 <P>hi guys,</P><P>forgive the n00bness of this question as im sure its fairly straightforward and/or been answered before.</P><P>So im just in the process of rolling out Splunk to the business. One of the key requirements is parsing our Nginx logs. Now im able to do this easily from a standard Linux box using a deployment server. However, all our websites are moving to Kubernetes so im wondering what's the best way that i can get the data from the nginx containers/pods to Splunk. Obviously adding the UF to the docker image for every microservice would be overkill as i want to keep the images as lean as possible. Am i right thats not the best way to do this?</P><P>&nbsp;</P><P>Thanks!</P> Mon, 16 Nov 2020 14:50:54 GMT https://community.splunk.com/t5/Getting-Data-In/Nginx-Logs-from-Kubernertes-Containers/m-p/529552#M89208 stuartcooney 2020-11-16T14:50:54Z