hi guys,
forgive the n00bness of this question as im sure its fairly straightforward and/or been answered before.
So im just in the process of rolling out Splunk to the business. One of the key requirements is parsing our Nginx logs. Now im able to do this easily from a standard Linux box using a deployment server. However, all our websites are moving to Kubernetes so im wondering what's the best way that i can get the data from the nginx containers/pods to Splunk. Obviously adding the UF to the docker image for every microservice would be overkill as i want to keep the images as lean as possible. Am i right thats not the best way to do this?
Thanks!
