Splunk Dev

Feed the logs from AWS Fargate Docker containers

SunilGovindanku
Engager

I am looking for a way to send the logs from AWS Fargate Docker containers to Splunk. The EC2 Docker containers support the Splunk log driver but fargate ones don't. What is the best way to accomplish this?

Tags (1)

ilyaresh
Path Finder
0 Karma

inventsekar
Ultra Champion

maybe check this:
https://www.splunk.com/blog/2016/07/13/docker-amazon-ecs-splunk-how-they-now-all-seamlessly-work-tog...

or, check some other docker apps
https://splunkbase.splunk.com/apps/#/search/Docker

try to install on dev/test environment and maybe you need to fight a lot of configurations

0 Karma

tagrawal
New Member

Thanks Sekar, I have myself use HEC in project but currently the issue is the logs need to be sent to Cloudwatch and then pushed to Splunk via HEC SPlunk. So one have to manage another log store plus lambda unnecessarily. AWS doc has a splunklogs driver but I think it is not enabled for FARGATE.
see link https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_LogConfiguration.html

0 Karma

tagrawal
New Member

Just wondering, Is this a question which can be answered by Splunk or FARGATE team. IMO this is something which FARGATE team should provide support.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...