Splunk_Docker/New-smaller

Splunk Beta 9.2.2 Beta Docker Image DockerfilesSplunk Beta 9.2.2 Beta Docker Image Dockerfiles

Usage

This docker file is used to build a docker image that will contain Splunk Enterprise 9.2.2 Beta that features the new SPL2 search langauge.

Building The Docker Image

To build the image run the following: docker build -t {Image-name}:{tag} .

Example: docker build -t 481078097852.dkr.ecr.us-east-2.amazonaws.com/splunk:9.2.2-beta .

Running the image locally

To run the newly created image locally, run:

docker run -d -p 8000:8000 -p 8088:8088 -p 9997:9997 -e SPLUNK_START_ARGS="--accept-license" -e SPLUNK_PASSWORD="helloworld" --name splunk-beta 481078097852.dkr.ecr.us-east-2.amazonaws.com/splunk:9.2.2-beta

Pushing the image to ECR (Elastic Container Registry) for use with KGI K8S cluster

To push the image to ECR for the use within KGI's K8S cluster do the following:

• Ensure that you are successfully authenticated with AWS-CLI as decribed here
• Cache credentials and login using docker: aws ecr get-login-password --region us-east-2 | docker login --username AWS --password-stdin 481078097852.dkr.ecr.us-east-2.amazonaws.com
• Push the image to ECR: docker push 481078097852.dkr.ecr.us-east-2.amazonaws.com/splunk:9.2.2-beta