Logs are not forwarded to external Splunk index in RHOCP 4
Issue
- Logs are not received on the external
Splunk
index configured inClusterLogForwarder
. - Logs are not received on the external
Splunk
index mapped byindexKey
configured inClusterLogForwarder
. - There are no warnings in collector pods when logs are not transmitted to the specific
Splunk
index configured inClusterLogForwarder
.
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4.13+
- Red Hat OpenShift Logging (RHOL)
- 5.9+
- Splunk
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.