https://community.splunk.com/t5/Getting-Data-In/How-to-customize-official-splunk-universalforwarder-docker-image/m-p/388696#M69584 <P>Below docker command will be used to run the app.</P> <P>docker run \<BR /> -d \<BR /> -name app_x \<BR /> -v /opt/app/logs \<BR /> testapp<BR /> "/opt/app/logs" will be the place where app logs will be kept and sharing the data volume so that another container can access it.</P> <P>I want to use another splunk container which will use the same data volume. Is there any official docker file from splunk?</P> <P>I am stuck on how to implement this below on the splunk docker file.</P> <PRE><CODE>[monitor:///home/ec2-user] whitelist=app\.log|\.log$|app index=test sourcetype=log4j [splunktcp://9997] compressed = false </CODE></PRE> <P>OR set <CODE>splunk_server_host</CODE></P> <P>Thanks for helping</P> Thu, 08 Nov 2018 12:07:59 GMT vrathore2016 2018-11-08T12:07:59Z https://community.splunk.com/t5/Getting-Data-In/How-to-customize-official-splunk-universalforwarder-docker-image/m-p/388696#M69584 <P>Below docker command will be used to run the app.</P> <P>docker run \<BR /> -d \<BR /> -name app_x \<BR /> -v /opt/app/logs \<BR /> testapp<BR /> "/opt/app/logs" will be the place where app logs will be kept and sharing the data volume so that another container can access it.</P> <P>I want to use another splunk container which will use the same data volume. Is there any official docker file from splunk?</P> <P>I am stuck on how to implement this below on the splunk docker file.</P> <PRE><CODE>[monitor:///home/ec2-user] whitelist=app\.log|\.log$|app index=test sourcetype=log4j [splunktcp://9997] compressed = false </CODE></PRE> <P>OR set <CODE>splunk_server_host</CODE></P> <P>Thanks for helping</P> Thu, 08 Nov 2018 12:07:59 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-customize-official-splunk-universalforwarder-docker-image/m-p/388696#M69584 vrathore2016 2018-11-08T12:07:59Z