# Sending container logs to Splunk

**URL:** <https://forums.suse.com/t/sending-container-logs-to-splunk/17325>\
**Category:** SUSE Rancher Prime\
**Created:** [April 30, 2020, 1:23pm UTC](https://forums.suse.com/t/sending-container-logs-to-splunk/17325 "2020-04-30T13:23:45Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![rudyj03](https://avatars.discourse-cdn.com/v4/letter/r/9fc29f/32.png) [@rudyj03](https://forums.suse.com/u/rudyj03)\
**Post date:** [April 30, 2020, 1:23pm UTC](https://forums.suse.com/t/sending-container-logs-to-splunk/17325/1 "2020-04-30T13:23:45Z")

</div>

I’ve been going through the documentation to get my container logs sent to Splunk. I’m able to validate the settings from the rancher UI and query the test message in Splunk. However, I don’t see any container logs getting sent afterwards. I’m at a loss as to where to look for any sort of issues Rancher may be having when trying to send logs.