Solved: what is the best way to forward k8s cluster logs/s...

xindeNokia · ‎02-13-2020

indexers + SH setup on perm.
What is the best way for splunk to monitor a k8s cluster deployed on one box / 3 nodes setup (HA) / 6 nodes setup (HA DR)?

Thanks in advance!

codebuilder · ‎02-14-2020

There is an existing solution for this that works quite well, Splunk Connect for Kubernetes.

https://splunkbase.splunk.com/app/4497/

https://github.com/splunk/splunk-connect-for-kubernetes

----
An upvote would be appreciated and Accept Solution if it helps!

View solution in original post

codebuilder · ‎02-14-2020

There is an existing solution for this that works quite well, Splunk Connect for Kubernetes.

https://splunkbase.splunk.com/app/4497/

https://github.com/splunk/splunk-connect-for-kubernetes

----
An upvote would be appreciated and Accept Solution if it helps!

what is the best way to forward k8s cluster logs/status etc to indexers?

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Tech Talk | One Log to Rule Them All

Splunk Security Content for Threat Detection & Response, Q1 Roundup