All Apps and Add-ons

How to debug missing logs in Splunk from Kubernetes

rmurali4u
New Member

I have AWS EKS cluster and On-premise splunk. I have installed splunkconnector and setup index based routing so that each namespace logs goes to corresponding index in the splunk( index name = namespace name). I can see logs by namespace in the Splunk. Under each namespace different sourcetype exists, where each sourcetype is an application in the namespace.

In this kind of setup, if log is available in the the K8 pod but not in the Splunk. How to debug?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...