topic Trying to install Splunk Logging Driver fails in Getting Data In

Trying to install Splunk Logging Driver fails

arafatmohammed — Sun, 25 Mar 2018 15:08:54 GMT

Hi,

I am following the document [https://www.splunk.com/blog/2015/12/16/splunk-logging-driver-for-docker.html] to install Splunk logging driver but it fails.

$ docker --version
Docker version 17.06.2-ee-6, build e75fdb8

Trying to configure logging driver for the whole DOcker daemon as mentioned in the document. Running the following command :

# docker run --publish 80:80 --log-driver=splunk --log-opt splunk-token=5E0BDA60-ABCD-WXYZ-BE73-30ABB1197E6E --log-opt splunk-url=https://prd-p-jptcv56bhqnb.cloud.splunk.com --log-opt splunk-insecureskipverify=true nginx

docker: Error response from daemon: driver failed programming external connectivity on endpoint angry_benz (01dacbcdaf89fbf4dce11049cb0594f1c99311390ac5735ff08e8b45d021dea5): Error starting userland proxy: listen tcp 0.0.0.0:80: bind: address already in use.
ERRO[0000] error waiting for container: context canceled

PS: splunk-url I have used is my Splunk Cloud URL. Please let me know how I can fix this.

Thanks!

Re: Trying to install Splunk Logging Driver fails

Azeemering — Sun, 25 Mar 2018 19:23:06 GMT

In the url you provided it says:
Note: In Splunk Cloud you need to work with support to enable HTTP Event Collector. Open Splunk’s Web UI, go to the Settings → Data Inputs. Choose HTTP Event Collector. Enable it with Global Settings and add one New Token. After the token is created, you will find the Token Value which is a guid. Write it down, as you will need it later for configuring the Splunk Logging Driver.
Did you contact splunk support for this as they need to perform some extra config for it to work on splunk cloud.

Re: Trying to install Splunk Logging Driver fails

arafatmohammed — Sun, 25 Mar 2018 19:28:12 GMT

Thanks Azeemering, I am going to try this out today. And no, I was not aware the Splunk Support will need to perform extra configuration for it to work. I will check with them. Thanks a lot!