Monitoring Docker, OpenShift and Kubernetes - Version 5.11 - Support for PVC application logs

Minor update 5.11 focuses on stability improvements and adds support for PVC volumes for collecting application logs.

Collecting application logs from PVC volumes

Starting from Version 5.11, you can collect application logs from volumes with type persistentVolumeClaim. Similarly to our example with emptyDir volumes, you can use persistentVolumeClaim as the volume type.

For example:

yaml

 1apiVersion: v1
 2kind: Pod
 3metadata:
 4  name: postgres-pod
 5  annotations:
 6    collectord.io/volume.1-logs-name: 'logs'
 7spec:
 8  containers:
 9  - name: postgres
10    image: postgres
11    command:
12      - docker-entrypoint.sh
13    args:
14      - postgres
15      - -c
16      - logging_collector=on
17      - -c
18      - log_min_duration_statement=0
19      - -c
20      - log_directory=/var/log/postgresql
21      - -c
22      - log_min_messages=INFO
23      - -c
24      - log_rotation_age=1d
25      - -c
26      - log_rotation_size=10MB
27    volumeMounts:
28      - name: data
29        mountPath: /var/lib/postgresql/data
30      - name: logs
31        mountPath: /var/log/postgresql/
32  volumes:
33  - name: data
34    emptyDir: {}
35  - name: logs
36    persistentVolumeClaim:
37      claimName: logs

Collectord will automatically discover logs stored in volume logs mounted with persistentVolumeClaim logs.

In order to take advantage of this feature, please make sure to update the YAML configuration and upgrade collectord to version 5.11.260.

Links

You can find more information about other minor updates by following the links below.

Release notes

Upgrade instructions

Installation instructions

About Outcold Solutions

Outcold Solutions builds applications for Splunk Enterprise and Splunk Cloud. Our certified monitoring solutions, powered by Collectord, bring logs, metrics and events from Kubernetes, OpenShift and Docker clusters, Linux hosts and Windows containers into Splunk, with the dashboards and alerts that help developers watch their applications and operators keep their clusters healthy. Our search apps query Kubernetes and AWS live from the search bar, with nothing to ingest, and OS AI Agent puts the model you choose to work inside Splunk, with each user's own permissions. Since 2017 we have been helping businesses keep what they need to answer complex questions about their infrastructure in one place.