what is the best way to forward k8s cluster logs/status etc to indexers?

[xindeNokia]

indexers + SH setup on perm.
What is the best way for splunk to monitor a k8s cluster deployed on one box / 3 nodes setup (HA) / 6 nodes setup (HA DR)?

Thanks in advance!

[codebuilder · Accepted solution]

There is an existing solution for this that works quite well, Splunk Connect for Kubernetes.

https://splunkbase.splunk.com/app/4497/

https://github.com/splunk/splunk-connect-for-kubernetes