Splunk-connect-for-kubernetes: How do I import logs from kubernete master servers to splunk ?

[rufengxu]

How do I import logs from kubernete master servers to splunk ? Do I need to leverage this splunk-connect-for-kubernetes or I should use regular data forwarder ?

Thanks,
Rufeng

[Vince-Cercury]

For me (kube-aws), I had to add

tolerations:
  - key: node.alpha.kubernetes.io/role
    operator: "Exists"
    effect: "NoSchedule" 

in values.yaml. It started a few more agent for each of my master and then all the kube-system logs started to come to Splunk

[matthewmodestino]

yep! just need to ensure the necessary tolerations are in place