Outcold Solutions - Monitoring Kubernetes, OpenShift and Docker in Splunk

Monitoring Docker, OpenShift, Kubernetes and Linux - Version 5.22

Version 5.22 of our applications, configurations, and Collectord is now available. In this blog post, we will cover some highlights of the release.

Disk Stats Dashboard

Under Review->Disk Stats you can find a new dashboard showing statistics of all the mounted disks on the host.

Disk Stats

User defined Splunk outputs

We have received this feature request from a few customers, and we are happy to announce that it is now available.

Users can define a Splunk output with the CustomResourceDefinition (CRD) SplunkOutput in their namespace. For example

apiVersion: "collectord.io/v1"
kind: SplunkOutput
metadata:
  name: splunk-user-output-for-deployment
spec:
  token: 1a8b9c3e-7789-4353-821f-15b9662bac99
  url: https://splunk.example.com:8088/services/collector/event/1.0
  insecure: true

Similarly to how you can reference the default Splunk outputs defined in the ConfigMap, you can reference them with an annotation

apiVersion: apps/v1
kind: Deployment
metadata:
  name: long-running
  annotations:
    collectord.io/output: splunk::user/default/splunk-user-output-for-deployment
spec:
  ...

You define it as splunk::user/<namespace>/<name>.

To use this feature, you need to update your configuration file and include the definition of the CustomResourceDefinition SplunkOutput.

Other significant changes

  • Monitoring Kubernetes and OpenShift applications show Pod Ownership, PriorityClass and Pod Requests and Limits in the Workload dashboard.
  • Added additional metrics CPU IOWait, Steal and Idle.
  • You can blacklist labels from forwarded metadata.
  • New diagnostic: CPU Vulnerabilities.

You can read all other changes and bug fixes in the release notes below.

You can find more information about other minor updates by following the links below.

Release notes

Upgrade instructions

Installation instructions


About Outcold Solutions

Outcold Solutions provides solutions for monitoring Kubernetes, OpenShift and Docker clusters in Splunk Enterprise and Splunk Cloud. We offer certified Splunk applications, which give you insights across all container environments. We are helping businesses reduce complexity related to logging and monitoring by providing easy-to-use and easy-to-deploy solutions for Linux and Windows containers. We deliver applications, which help developers monitor their applications and help operators keep their clusters healthy. With the power of Splunk Enterprise and Splunk Cloud, we offer one solution to help you keep all the metrics and logs in one place, allowing you to quickly address complex questions on container performance.