topic Re: splunk with Docker in windows in Getting Data In

Is it possible to run splunk in docker container in windows ?

sarit_s — Tue, 05 Apr 2022 13:52:48 GMT

Hello
is it possible to run splunk in docker container in windows ?
if yes, can someone link me to the installation guide ?

thanks

Re: splunk with Docker in windows

koshyk — Tue, 07 May 2019 07:42:20 GMT

Yes, it does. One of our POC was done in Windows, but was not elaborate

Install Docker and try out another container to see everything is working
Download Splunk docker image from: https://hub.docker.com/r/splunk/splunk/
Follow instructions in there. This is a very basic setup

For a more elaborated clustered setup, with ansible & docker compose, follow github repo https://github.com/getkub/ansible_docker_splunk . This is more complex though

Re: splunk with Docker in windows

sarit_s — Wed, 30 Sep 2020 00:22:26 GMT

hi
thanks for your reply
i did all of this but im getting error :

ERROR: Couldn't read "/opt/splunk/etc/splunk-launch.conf" -- maybe $SPLUNK_HOME or $SPLUNK_ETC is set wrong?

Re: splunk with Docker in windows

koshyk — Tue, 07 May 2019 11:26:22 GMT

did you volume mount $SPLUNK_HOME/etc to another location?
which version of splunk (within docker) you are using?

There are few similar errors as per post: https://answers.splunk.com/answers/553373/couldnt-determine-splunk-home-perhaps-it-should-be.html

Re: splunk with Docker in windows

sarit_s — Tue, 07 May 2019 11:46:16 GMT

hi
did not volume mount $SPLUNK_HOME
latest version of splunk

Re: splunk with Docker in windows

koshyk — Wed, 30 Sep 2020 00:22:39 GMT

in that case, you may need shell access to the splunk container.
1. Try creating a splunk-launch.conf within your windows system (eg: SPLUNK_HOME=/opt/splunk)
2. Do a docker copy from host to container
eg docker cp C:\somewhere\in_windows\splunk-launch.conf <containerId>:/opt/splunk/etc/splunk-launch.conf

Try running again

Re: splunk with Docker in windows

sarit_s — Tue, 07 May 2019 16:19:32 GMT

how is that possible that in windows i will have path like /opt/splunk
it is a linux path

Re: splunk with Docker in windows

mattymo — Mon, 13 May 2019 14:08:36 GMT

Hi! Splunk doesn't currently produce a Windows based Splunk image.

https://splunk.github.io/docker-splunk/SUPPORT.html

That being said, if you can handle creating Windows based Dockerfiles, you can simply create your own image. I haven't seen any samples out there in my travels.

Re: splunk with Docker in windows

shincho — Thu, 16 Jan 2020 04:36:30 GMT

1.what hoshky said is put a splunk-launch.conf file into splunk's container
2."/opt/splunk" is the path in splunk's container, not path in windows OS
3.After done what hoshky said, I could access localhost:8000

Re: splunk with Docker in windows

vikramyadav — Sat, 25 Apr 2020 10:31:46 GMT

No, Currently docker image of Splunk does not support in windows. Till now it only supports the Linux bases operating system.
It clearly mention in the prerequisite

Re: splunk with Docker in windows

dbjdbj — Tue, 05 Apr 2022 09:02:43 GMT

It is now 2022Q2 and I have the same question.

Judging by https://github.com/splunk/docker-splunk/blob/develop/docs/SUPPORT.md

it is just Linux?