Splunk universal forwarders install in kubernetes using helm

Kubernetes
#1

Hi I am trying to install splunk universal forwarders with latest release in kubernetes using helm
But failing…
Pls let me know any reference urls or steps to install

Thanks
Adl

#2

Failing how?
Where did you get the chart? There should be instructions there.

#3

As when we Tried to install it’s giving error as User not present for image 8.2 above and Same code is working with image version with 8.2

Pls let me know any steps to install using Helm instead of yaml files

Image used as :splunk/universalforwarder:8.2(working and ) and above 8.2 is not working

#4

As Alistair asked, knowing where the chart is from would help, since most likely the github for that will have:

  • support
  • an issue queue for bugs

The closest thing I can find to what you’re talking about was desupported by the Splunk people more than a year ago. Maybe there’s somewhere newer to look. So: do you have a URL that you got the helm chart from?

#5

That what I am looking for helm chart repo as using yaml with image it’s giving error for images after 8.2 version as user not present error

Splunk/universal forwarder:10.0.2

Pls provide any helm chart urls to use for install splunk Universal forwarder in Kubernetes cluster

Thanks

#6

Where did you get the YAML from? They might know as well.

#7

This is sample for helm

https://github.com/splunk/splunk-connect-for -kubernetes

And we customised daemonset yaml and with the below config
Parameter as it’s working without this it’s failed with user not present
Server.conf
Allows remote login = always

#8

If you look at that site, it says:

End of Support

Important: The Splunk Connect for Kubernetes will reach End of Support on January 1, 2024. After that date, this repository will no longer receive updates from Splunk and will no longer be supported by Splunk. Until then, only critical security fixes and bug fixes will be provided. Splunk recommends migrating to Splunk OpenTelemetry Collector for Kubernetes. Please refer to this migration guide for more details.

They’re recommending migrating to the OpenTelemetry Collector for Kubernetes. Have you folks tried that?

#9

Yes I have tried but same error as user not found …
Id there any other helm repo to work on or any other manifest repo to work with latest image 10.0.2 ( splunk/universalforwsder:10.0.2)

#10

That’s a github repo – you should put an issue on their queue there.

#11

Can you able to provide any other repo to use for latest docker image that is splunk/universalforwaders:10.0

#12

Is there any reason you can’t just get the image off Dockerhub?

#13

Thanks for this as I am using 10.0 version and try to send pod logs to splunk with”Splunk” user it’s not able to send where as with Root” user it’s able to send logs to splunk

How I can send logs with non-root user from Uf pod

Thank