search

sabre1041 / openshift-logforwarding-splunk

Demonstration of forwarding logs from OpenShift to Splunk
Apache License 2.0
31 stars 25 forks source link

Does not work on OpenShift 4.7 #14

Open bianchi2 opened 3 years ago

bianchi2 commented 3 years ago

Not sure what's wrong. All deployments are a success, but a sample search in splunk gives no results. How do I troubleshoot potential issues?

oc annotate gives the following result:

Error from server (NotFound): clusterloggings.logging.openshift.io "instance" not found

And indeed, I do not see any clusterlogging object in templates. Do I need to create it separately?

DanaEHI commented 2 years ago

Not sure if you got it working, but yes, you will need to configure logging 'normally', and then add this on top.

mortya commented 2 years ago

FWIW, it's working fine for me on Openshift 4.7.

If this is still an issue for you, try looking at the logs for the fluentd and openshift-logforwarding-splunk pods in the openshift-logging namespace.