Getting Data In

(beginner) how to use splunk universal forwarder?

horangs
New Member

Hello.

I want to import some data(not kubernetes logs, metrics) to splunk (Enterprise).
I've heard I should use splunk universal forwarder.

(My data is like commit info of Git (who commit, when, how many files, file names, ...)
not system log and whenever get same data...)

I find out it's docker container exists but I can't find it's helm chart.

First time, I think I can run forwarder container every x minutes using Jenkins.
but I can't find example in googling and I realize that I need PV for it.

So my second thinking is run forwarder container like daemon on kubernetes.
but also I can't find example (and helm chart for this).

What is the best usecase of forwarder in this case?
Do you have a plan for provide helm chart of forwarder?

Many thanks,

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...