Frequency of kube:objects:pods sourcetype events

[stefan_habuline]

Hi all,

Do you know, how to set up the frequency for the sourcetype="kube:objects:pods" events? Right now, in our setup, the events are being refreshed in Splunk every 15 minutes and I would like to have that frequency to be lower.

Many thanks for help in advance.

- Stefan

[stefan_habuline]

In case somebody else is wondering, following has to be changed in the splunk-connect-splunk-kubernetes-objects configmap:

<pull>
resource_name pods
interval 3m
</pull>

Works out of the box, no pod restart is needed.