![]() The following Splunk documentation is used as a guide for creating the image: This will then be used to create a new software image using the grabimage command. The method used here is to use a working regular node, with splunk-forwarder installed and configured on it. Login to splunk and do a search to verify that logs are streaming in.By following the procedure outlined here: Installing Splunk-Forwarder and building a new software image: Splunkforwarder-7ff865fc8-4ktpr 1/1 Running 0 76s STEP 5: Check if logs are written to splunk Verify that the splunk universal forwarder pods are running: $ kubectl get pods | grep splunkforwarder MountPath: /opt/splunkforwarder/etc/system/localĭeploy the container: kubectl apply -f splunk_forwarder.yaml This will help with copying the configmap configuration contents into the splunk universal forwarder container. # Where data is read from disabled = false sourcetype = log index = microservices_uat # This index should already be created on the splunk environmentĭeploy the configmap: kubectl apply -f configmap.yaml STEP 4: Deploy the Splunk universal forwarderįinally, We will deploy an init container alongside the splunk universal forwarder container. Server = 172.29.127.2:9997 # Splunk indexer IP and Port useACK = true autoLB = true nf: |. $ vim configmap.yamlĭefaultGroup = splunk-uat = true indexAndForward = false You will need to change the configmap configurations to suit your needs.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |