i want to monitor my docker containers with collectd and the Splunk infrastructure App, I followed the instructions of https://docs.splunk.com/Documentation/InfraApp/latest/Admin/ManageAgents, but when I want to start the collect deamon it comes up with these error Messages:
docker plugin: Buffer size is 16384, Data received=16384. Increase ReadBufferSize
docker plugin: curleasyperform failed with status 23: Failed writing received data to disk/application
docker plugin: Failed to get list of running containers
The Connection to my Splunk Server via hec is working fine, because i get the metrics of my physical machine, but not of these Docker containers. My Docker containers are running and i have checked the Docker.sock file with curl.
I am working on that problem for 2 days now. Would be great if anyone could help.
Please add/increase ReadBufferSize in docker stanza in file /etc/collectd/collectd.conf on docker host.
dockersock "/var/run/docker.sock" apiversion "v1.20" **ReadBufferSize 32000**
You may have tune this value depending on the number of docker containers on your host.
I have antother question regarding this topic. At the Moment I can see only Docker Containers by ID and not by Name. Is there any possibilty to switch this? I tried it with lookup files, but it is not working with metrics.