All Apps and Add-ons

How to debug missing logs in Splunk from Kubernetes

rmurali4u
New Member

I have AWS EKS cluster and On-premise splunk. I have installed splunkconnector and setup index based routing so that each namespace logs goes to corresponding index in the splunk( index name = namespace name). I can see logs by namespace in the Splunk. Under each namespace different sourcetype exists, where each sourcetype is an application in the namespace.

In this kind of setup, if log is available in the the K8 pod but not in the Splunk. How to debug?

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!