Docker App for Splunk
Overview
Details
This App is dependent on the “DockerMonitoring Add-on for Splunk” https://classic.splunkbase.splunk.com/app/7227/. The addon ingest the required data and this App uses that data to populate the dashboards.
Installation:
Software requirements
Splunk Enterprise system requirements
This App runs on Splunk Enterprise, all of the Splunk Enterprise system requirements apply.
Deployment Guide
• Single Instance
(Pre-requisite) Docker App For Splunk
• Distributed deployment
Search Head – Docker App For Splunk
Configuration:
After installing the app, you can populate it by going to "Advanced Search » Search Macros." From there, search for and edit the macro according to the instructions in the snapshot below. Then, enter the name of the index where the data is being ingested using the "Docker Add-on for Splunk."
Macro name: “docker_index_”
Dashboard details
-
Docker Containers: It provides a detailed account of the Total Containers present, as well as those that are currently operational, stopped or paused. Their current state, status and when they were created as well as, if there are any warnings that need immediate attention.
-
Docker Images: It furnishes comprehensive details about the images in your environment such as the total number of images, their names, ID, creation date, and their size.
-
Docker Statistics: It offers a thorough breakdown about the CPU and Memory consumption as well as the specifics of each container's memory usage, alongside a comprehensive overview of total PIDs.
Release Notes
Version 1.0.2
Splunk cloud compatibility
Version 1.0.1
Splunk cloud compatibility