Outcold Solutions - Monitoring Kubernetes, OpenShift and Docker in Splunk
Kubernetes Search in Splunk Monitoring Docker in Splunk Monitoring Kubernetes in Splunk Monitoring OpenShift in Splunk Monitoring Linux in Splunk Monitoring Windows Containers in Splunk Forwarding Logs to Elasticsearch and OpenSearch Forwarding Logs to QRadar
Documentation Blog Contact Us Pricing Evaluation licenses Partners License Agreement Privacy Policy Refund & Cancellation Acceptable Use Policy FAQ
Kubernetes Search

Support

Kubernetes Search is built and supported by Outcold Solutions. This page covers how to reach us and what to include so we can help quickly.

Get help

Email support@outcoldsolutions.com, or follow How to submit a support request in the FAQ. Evaluations are supported too - if you’re trying the app on a 30-day evaluation and hit a wall, reach out.

What to include

A good report gets to a fix faster. Please include:

  • The app version (shown on the Setup page and in the release history) and your Splunk version.
  • The exact SPL you ran and the full error message.
  • The relevant logs (see below).
  • The cluster registration, with credentials redacted - the server URL, the authentication type, and the TLS settings.

Collect logs

Each search writes its own k8s_search.log in the search’s dispatch directory on the search head, and the app’s setup handlers and cache sweeper log to _internal:

index=_internal k8s_search

Raise the detail by setting level = debug under [logging] in k8s_search.conf while you reproduce the issue, then capture the output. Troubleshooting walks through the common failures and where to look.

Support terms

Support is provided under your license or evaluation agreement. See the license agreement for the terms, and Pricing for plans.