Docker Monitoring Add-on for Splunk
Overview
Details
Do install Docker app for splunk https://classic.splunkbase.splunk.com/app/6788/ for insigths
The Docker Add-on seamlessly integrates with your self-hosted Docker environment, leveraging API calls to retrieve a variety of data, including container events, member information, groups, network configurations, and system policies.
Get activation key for new feature- https://avotrix.com/splunkapp.php
Installation & Configuration
Splunk Enterprise system requirements
This Add-on runs on Splunk Enterprise, all of the Splunk Enterprise system requirements apply.
Deployment Guide
• Single Instance (8.X)
(Pre-requisite) Docker Addon for Splunk
• Distributed deployment (8.x)
Heavy Forwarder – Docker Addon for Splunk
Search Head – Docker Addon for Splunk
Configuration for Inputs
1. Deploy Apps and Addons as per Deployment Guide above.
2. Navigate to configuration>> addon setting>>add activation key
3. Navigate to configuration>>Proxy >>add proxy settings (if applicable)
Note: Proxy server must have SSL enabled
4. Navigate to configuration>>Account>>Add>> put Docker IP and Docker DNS.
5. Navigate to the Inputs > Create New Inputs > Add Inputs.
6. Create the inputs to fetch the logs from Docker API.
7. Provide Global account(as per Account added)
8. Create/Select the Index for log ingestion.
9. Once inputs are created and data is flowing. Data feed health check Dashboard will reflect.
Release Notes
Version 3.0.15
1.Bug fixes
2.Improved UI
3.Introduced logging to refine activation tracking and client service.
Version 1.0.0
Version 1.0.0
1. Data feed health check
2. Proxy setup
3. Improved User Experience