Blog

Monitoring Docker, OpenShift and Kubernetes - Version 5.16

2 min read Back to all posts
docker kubernetes openshift splunk

The major feature of this release is self-monitoring of Collectord. With the metrics published to Splunk from Collectord, you can easily monitor the performance of the logging pipeline and Splunk HEC input. We have included many small bug fixes and usability improvements in this release as well.

Collectord Metrics

Collectord publishes metrics for connections to Splunk, how long the requests take, how large the lag is for the events sent in every batch and many more. Now you can easily find if your Splunk HEC is not performant enough for accepting the number of logs sent from your clusters.

Collectord Metrics

To see data on this dashboard, make sure to update your configuration for OpenShift and Kubernetes and include input input.collectord_metrics.

These metrics can also be exported in Prometheus format. For that, you need to enable httpServerBinding under [general] and metrics will be available under the path /metrics/prometheus.

More annotations for Prometheus inputs

With annotations for Prometheus metrics collection you can configure the caname of the certificate and include various Authorization headers.

New configurations

You can filter host file (input.files and input.journald) logs. Include the blacklist and whitelist patterns to reduce the number of logs from chatty hosts.

ini
1# Blacklisting and whitelisting the logs
2# whitelist = ^regexp$
3# blacklist = ^regexp$

You can find more information about other minor updates by following the links below.

Release notes

Upgrade instructions

Installation instructions

About Outcold Solutions

Outcold Solutions builds applications for Splunk Enterprise and Splunk Cloud. Our certified monitoring solutions, powered by Collectord, bring logs, metrics and events from Kubernetes, OpenShift and Docker clusters, Linux and macOS hosts, and Windows containers into Splunk, with the dashboards and alerts that help developers watch their applications and operators keep their clusters healthy. Our search apps query Kubernetes and AWS live from the search bar, with nothing to ingest, and OS AI Agent puts the model you choose to work inside Splunk, with each user's own permissions. Since 2017 we have been helping businesses keep what they need to answer complex questions about their infrastructure in one place.

Red Hat
Splunk
AWS