Deploying Splunk Enterprise on Kubernetes

[fzel]

Hi everyone,

We’re currently evaluating whether to deploy Splunk in a Kubernetes environment or continue running it on bare metal as we transition from a standalone setup to a high-availability (HA) architecture. I think I've read somewhere that running it in k8s is not recommended but I haven't found any reasons why.

I’d love to hear from anyone with experience or recommendations on this.

Any insights would be greatly appreciated. Thanks in advance!

[livehybrid]

Hi @fzel 

You can certainly deploy Splunk on K8s using "Splunk Operator for Kubernetes" as per the link that @thahir provided, which is a valid and supported Splunk Validated Architecture (SVA), with the biggest limitation being if you intend to run ITSI on it then this is not currently supported.

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[thahir]

@fzel , please refer this doc

https://help.splunk.com/en/splunk-cloud-platform/get-started/splunk-validated-architectures/applied-...