7/14/2023 0 Comments Splunk universal forwarder serviceThe Splunk Universal Forwarder however does not have a GUI, so you will not be able to access it through a web interface. The Splunk Universal Forwarder is started in a similar way to Splunk Enterprise $ docker run -d -p 9997:9997 -e 'SPLUNK_START_ARGS=-accept-license' -e 'SPLUNK_PASSWORD='store/splunk/universalforwarder:7.3 $ docker pull store/splunk/universalforwarder:7.3 Starting Splunk Universal Forwarder Docker container Install Splunk Universal Forwarder Docker containerĭownload the required image to your local Docker image library. Failure to do so will render your deployment in an "unsupported" state. If you intend for the containerized Splunk Enterprise deployment to be supported by your Enterprise Support Agreement, you must verify you meet all of theĪbove "supported" requirements.Install the appropriate Docker Engine for your operating system.Volumes used for persistence of the Splunk Enterprise data inside the Docker container must be one of the supported filesystems listed in the Splunk installation manual. Required HardwareĪll instances must be at or above the minimum server specifications found in the Splunk installation manual.Īdditionally, the Docker container at this time is also limited to the following base installation chipsets: For all other configurations, please contact Splunk Professional Services. Note: Splunk Support only provides support for the single instance Splunk Validated Architectures (S-Type), Universal Forwarders and Heavy Forwarders. Please consult the Docker or Kubernetes documentation regarding best practices for building services. Splunk Support will only provide assistance with the functionality of running the container on the systems listed above, and cannot support setup and configuration of the a service level object to be used for docker-compose or kubectl. ** Note: ** Splunk Support does not provide assistance with the advanced usage of an operator such as the scale command.
0 Comments
Leave a Reply. |