Universal Forwarder installation on Kubernetes On-premises

[vijreddy30]

Hi Team,

My requirement is Universal Forwarder installation on Kubernetes On-premises system.

Please send me guide on installation on Kubernetes. 

[datadevops]

Hi there,

Option 1: Deployment Operator

• The Splunk Kubernetes Operator simplifies UF deployment and management. Check out the official guide: <invalid URL removed>

Option 2: Manual Deployment

• For more control, follow these steps:
  1. Create Pod spec: Define a Pod spec with the UF container image and configurations. Use inputs.conf and outputs.conf for log forwarding rules.
  2. Deploy using kubectl: Apply the Pod spec using kubectl apply.
  3. Manage resources: Use kubectl commands to scale, update, or delete the UF deployment.

Additional Tips:

• Consider using a DaemonSet for wider deployment across nodes.
• Secure your deployment with pod security policies and network policies.
• Explore Fluent Bit for advanced log processing and routing within Kubernetes.

Remember:

• Choose the option that best suits your needs and expertise.
• Refer to Splunk documentation and community resources for detailed instructions and troubleshooting.

~ If the reply helps, a Karma upvote would be appreciated