Outcold Solutions - Monitoring Kubernetes, OpenShift and Docker in Splunk
Monitoring Docker in Splunk Monitoring Kubernetes in Splunk Monitoring OpenShift in Splunk Monitoring Linux in Splunk Monitoring Windows Containers in Splunk Forwarding Logs to Elasticsearch and OpenSearch Forwarding Logs to QRadar
Documentation Blog Contact Us Pricing Evaluation licenses Partners License Agreement Privacy Policy FAQ
Syslog (QRadar)

Upgrade

In most cases, an upgrade is just a new Collectord image — but if you want the new features that ship with a release, you’ll also need to update your configuration. Track what’s new on our blog, and see the configuration diffs on GitHub at outcoldsolutions/collectord-configurations (use tags to compare versions).

Upgrade from version 25.10 to 26.04

Upgrade the collectorforkubernetes-syslog (or collectorforopenshift-syslog) image to version 26.04.X. Review the Kubernetes configuration or OpenShift configuration reference for any new fields you want to pick up.

Upgrade from version 5.24 to 25.10

Upgrade the image to version 25.10.X. The version scheme switches from semver (5.X) to YY.MM in this release.

Upgrade from version 5.23 to 5.24

Upgrade the image to version 5.24.

Older versions

For Collectord changes prior to 5.23, see the Monitoring Kubernetes upgrade guide — the same Collectord binary powers both products and the per-version upgrade notes apply equally, with one exception: there’s no Splunk app to upgrade in lockstep, so you can upgrade the agent image whenever you’re ready.