Do you know, how to set up the frequency for the sourcetype="kube:objects:pods" events? Right now, in our setup, the events are being refreshed in Splunk every 15 minutes and I would like to have that frequency to be lower.
Many thanks for help in advance.
In case somebody else is wondering, following has to be changed in the splunk-connect-splunk-kubernetes-objects configmap:
<pull>resource_name podsinterval 3m</pull>
Works out of the box, no pod restart is needed.