Nginx Logs from Kubernertes Containers

Getting Data In

hi guys,

forgive the n00bness of this question as im sure its fairly straightforward and/or been answered before.

So im just in the process of rolling out Splunk to the business. One of the key requirements is parsing our Nginx logs. Now im able to do this easily from a standard Linux box using a deployment server. However, all our websites are moving to Kubernetes so im wondering what's the best way that i can get the data from the nginx containers/pods to Splunk. Obviously adding the UF to the docker image for every microservice would be overkill as i want to keep the images as lean as possible. Am i right thats not the best way to do this?

Thanks!

Get Updates on the Splunk Community!

Nginx Logs from Kubernertes Containers

universal forwarder

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Join the Conversation

Nginx Logs from Kubernertes Containers

universal forwarder

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk