Outcold Solutions - Monitoring Kubernetes, OpenShift and Docker in Splunk

Monitoring

Monitoring Kubernetes Monitoring OpenShift Monitoring Docker Monitoring Linux Monitoring Windows Containers

Log forwarding

Elasticsearch and OpenSearch QRadar

Live search

Kubernetes Search Search for AWS Beta

AI agent

OS AI Agent Beta
Documentation Blog Contact Us Upload support diagnostics Pricing Evaluation licenses Partners License Agreement Privacy Policy Refund & Cancellation Acceptable Use Policy FAQ Careers

Blog

Monitoring Docker, OpenShift and Kubernetes - Version 5.16.361 (ARM support)

2 min read Back to all posts
docker kubernetes openshift splunk arm performance

Yesterday we released a patch for Monitoring Kubernetes, OpenShift, and Docker, with version 5.16.361. This patch release focused on stability and compatibility improvements for the latest versions of Kubernetes and OpenShift.

With this release, we included ARM support for Monitoring Kubernetes and Monitoring Docker (RedHat OpenShift does not support ARM architecture at this moment). Now you can run Collectord on your ARM-powered nodes. If you are hosting containers on AWS, we highly recommend looking at Graviton ARM-powered EC2 instances. You can find many articles and blog posts from AWS where they claim up to 50% price-performance benefits compared to x86_64 architecture.

Most of the runtimes (Java, Go, Node, Python, Rust, etc.) already support ARM, so the only thing you need to do is rebuild them with a new architecture.

We were also curious to test ARM-powered EC2 instances, so we ran our regular test of sending 10,000 events per second with 1KB in size, and saw how much benefit we could see from the ARM-powered EC2 instance.

Collectord did not show much better performance (~5%). Still, we saw 14% performance improvement overall and, most notably, a 20% reduction in cost (not taking into account that with the Graviton instance, we also more than doubled NVMe storage).

Performance

ARM images of Collectord are available with the suffix -arm64.

Upgrade instructions

Installation instructions

About Outcold Solutions

Outcold Solutions builds applications for Splunk Enterprise and Splunk Cloud. Our certified monitoring solutions, powered by Collectord, bring logs, metrics and events from Kubernetes, OpenShift and Docker clusters, Linux hosts and Windows containers into Splunk, with the dashboards and alerts that help developers watch their applications and operators keep their clusters healthy. Our search apps query Kubernetes and AWS live from the search bar, with nothing to ingest, and OS AI Agent puts the model you choose to work inside Splunk, with each user's own permissions. Since 2017 we have been helping businesses keep what they need to answer complex questions about their infrastructure in one place.

Red Hat
Splunk
AWS