[EKS] [Logging]: Splunk HEC Support for aws-logging on Fargate

[msfidelis]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Tell us about your request EKS aws-logging support for Splunk HEC on Fargate

Which service(s) is this request for? This could be Fargate, EKS

Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard? Send Fargate Pods Stdout Logs directly to Splunk HTTP Event Collector. This output is supported for native FluentBit, but aws-logging options only support lock-in options.

Are you currently working around this issue? I use Cloudwatch Output -> lambda -> HEC but this is a very expensive solution for high tput workloads,

[msfidelis]

Any interest in this feature on product roadmap?

[msfidelis]

Any Updates? 😢

[mlumarque]

We currently send our EKS/pod logs to cloudwatch. A lambda function is then trigger that then forwards the logs to splunk. We are looking at moving from fargate in favor of ec2 instances so we can use daemonsets to do most of the heavy lifting. Would love to stick to fargate since it's a managed soution.