Best parctice to monitor Kubernetes cluster with Splunk enterprise

[alexgohberg]

Hey all
Im recently started to work with GCP using K8s cluster, as im new in the field of K8s I will want to ask the big community here what is the best practices\ways to monitor the pods\nodes in the cluster with Splunk.
I already created a VM that running Splunk 7.1 at my environment.

Thanks in advance

[dipeshmitthalal]

We used Splunk connect for Kubernetes https://github.com/splunk/splunk-connect-for-kubernetes. This enabled us to get all data in Splunk. Then we can build dashboards we want. Also, Once can use Metrics / Analysis workspacehttps://splunkbase.splunk.com/app/4192/ to visualize metrics in easy way.

[outcoldman]

Our company provides a complete solution for Monitoring Kubernetes in Splunk https://www.outcoldsolutions.com/. We are Splunk Alliance Technology partners.

You can download our certified application at https://splunkbase.splunk.com/app/3743/ and follow instructions on how to get our kubernetes native collector to be installed in your cluster https://www.outcoldsolutions.com/docs/monitoring-kubernetes/

Our solution forwards application logs, host logs, metrics from the hosts, pods, containers and the processes. We are working on the next version of our solution, that will include monitoring capabilities for the control plane, including etcd cluster, controller manager, kubelets, scheduler, and providing capabilities to explore audit logs.