New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Splunk Parsing Lionpath Import #668

Open

ajkiessl opened this issue May 26, 2023 · 1 comment

Contributor

ajkiessl commented May 26, 2023 •

edited

Loading

Looks like splunk is parsing every single line as it's own event from the lionpath import pods:

https://search.splunk.psu.edu/en-US/app/search/search?q=search%20index%3Dlibraries%20%22kubernetes.namespace_name%22%3D%22etda%22%20%22kubernetes.pod_name%22%3D%22*lionpath*%22&display.page.search.mode=smart&dispatch.sample_ratio=1&earliest=-1d&latest=now&display.general.type=events&display.visualizations.charting.chart=line&display.events.fields=%5B%22uid%22%2C%22lionpath.error%22%5D&display.page.search.tab=events&display.events.list.drilldown=inner&display.events.raw.drilldown=inner&sid=1685108154.35635_F3FFC027-9116-40B3-B87D-B82606819F6B

Contributor Author

ajkiessl commented May 7, 2024

Use lograge to output logs like JSON

ajkiessl added this to ETDA Workflow

ajkiessl moved this to To do in ETDA Workflow

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment