Getting Data In

How to handle multiline Kubernetes logs?

vincebair
New Member

Hi, I'm trying to make multiline work
I posted an issue here [https://github.com/splunk/splunk-connect-for-kubernetes/issues/111][https://github.com/splunk/splunk...]

Basically it seems to work (multiline are single event in Splunk) but I'm getting a lot of errors in Splunk pod logs. I believe one per 5 second per log file

"deadlock; recursive locking" ,Hi mmodestino,

I'm trying to make the multiline work. I posted an issue on Github https://github.com/splunk/splunk-connect-for-kubernetes/issues/111
It kind of works but I'm getting "deadlock; recursive locking" errors in the Splunk pod logs. A lot of them. I think every 5 seconds for every log file, for every splunk pod

Why is it going into a loop?

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Converted from an answer to an old question into a new question.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...