Monitoring Docker, OpenShift and Kubernetes - Version 5.14.285 - whitelisting the messages

We have released a patch release for Collectord that includes a few new features, performance and memory improvements.

Whitelisting the messages

With the replace annotations, you could configure which log messages you want to drop and not forward to Splunk. If you want to configure a whitelist pattern and tell Collectord which messages should be forwarded to Splunk, you can configure a whitelist pattern now. For example, for an NGINX Pod you can specify that only log messages with POST and DELETE words should be forwarded to Splunk:

yaml

 1apiVersion: v1
 2kind: Pod
 3metadata:
 4  name: nginx-pod
 5  annotations:
 6    collectord.io/logs-whitelist: '((DELETE)|(POST))$'
 7spec:
 8  containers:
 9  - name: nginx
10    image: nginx

Links

You can find more information about other minor updates by following the links below.

Release notes

Upgrade instructions

Installation instructions

About Outcold Solutions

Outcold Solutions builds applications for Splunk Enterprise and Splunk Cloud. Our certified monitoring solutions, powered by Collectord, bring logs, metrics and events from Kubernetes, OpenShift and Docker clusters, Linux and macOS hosts, and Windows containers into Splunk, with the dashboards and alerts that help developers watch their applications and operators keep their clusters healthy. Our search apps query Kubernetes and AWS live from the search bar, with nothing to ingest, and OS AI Agent puts the model you choose to work inside Splunk, with each user's own permissions. Since 2017 we have been helping businesses keep what they need to answer complex questions about their infrastructure in one place.