sabre1041 / openshift-logforwarding-splunk

Demonstration of forwarding logs from OpenShift to Splunk
Apache License 2.0
31 stars 26 forks source link

splunk index flooded with checking ping #4

Closed kappert closed 4 years ago

kappert commented 4 years ago

Hello, is there a way to disable or bring down the pings to splunk? we have now over 3k ping / pong lines in splunk?

In 1 hour we have almost 180k events with this line {"message":"[cluster] checking ping"}

kappert commented 4 years ago

Found the issue, if you change the log level to debug, it will send a lot of messages to splunk, changed loglevel back to info and its gone.