Discover, share, and install apps and add-ons with the Splunk community on Splunkbase. Publish your own or add others to your Splunk platform instance.
Streamline your security operations with a SOAR system that integrates orchestration, playbook automation, and case management to enhance threat response.
Access and share apps and add-ons with the Splunk community on Splunkbase. Publish your own apps, or download and install others on your Splunk platform instance.
We recommend that you use Docker CE/EE 17.03 or Docker Engine 1.13 with this product. Some data might be missing if you use previous versions of Docker.
Container Monitoring is not supported on Docker for Windows or Docker for Mac.
The Machine Agent can monitor up to 120 running containers per host. The default maximum number of containers per host is 100. With the cgroup enabled flag set to true, the Machine Agent can monitor up to 600 containers per host. See Configure Docker Visibility.
The Machine Agent collects metrics from containers with one or more running processes whose command line matches a configurable regex. By default, this regex matches all processes (*). To override this behavior, edit this regex in <machine_agent_home>/extensions/DockerMonitoring/conf/DockerMonitoring.yml : containerMonitoringConfig:containerProcessSelectorRegex: ".*"
The maximum number of containers you can monitor in one Controller Tenant depends on the Controller Tenant size, the total number of App Agents, and the current load.