Skip to content

pattern not matched: splunk error #868

@Alpanakabra

Description

@Alpanakabra

Hi I am using https://github.com/splunk/splunk-connect-for-kubernetes/tree/develop/manifests/splunk-kubernetes-logging to implement splunk on my AWS eks cluster version 1.21

This is my values.yaml
global: xxxxx
licenseKey: cxxxxx
cluster:
kubeEvents:
enabled: false
webhook:
enabled: true
prometheus:
enabled: false
logging:
enabled: false
ksm:
enabled: true

Recently i updated my k8s version to 1.27 and the splunk stopped working and i am now getting the error

2023-09-12 13:01:50 +0000 [warn]: #0 [containers.log] pattern not matched: "2023-09-12T13:01:40.19427752Z stdout P 2023-09-12 13:01:40 +0000 [warn]: #0 [containers.log] pattern not matched: "2023-09-12T13:01:23.359524644Z stdout P 2023-09-12 13:01:23 +0000 [warn]: #0 [containers.log] pattern not matched: "2023-09-12T13:01:03.253198428Z stdout F \\\

can anyone help

Environment:

  • Kubernetes version (use kubectl version): v1.27
  • Ruby version (use ruby --version):
  • OS (e.g: cat /etc/os-release): Linux
  • Splunk version:1.4.15
  • Splunk Connect for Kubernetes helm chart version: using manifest and not helm
  • Others:

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions