topic Re: Which service is optimal for Splunk docker in AWS in Getting Data In

Which service is optimal for Splunk docker in AWS

miburo — Mon, 04 Nov 2019 19:03:22 GMT

Anyone running Splunk Docker in AWS as part of a dev/test environment?
Wondering which AWS service you found most optimal for this.

Re: Which service is optimal for Splunk docker in AWS

woodcock — Tue, 05 Nov 2019 02:41:25 GMT

For dev/test, why bother with the overhead of Docker; why not just run a Splunk all-in-one directly on free t2.micro instance?

Re: Which service is optimal for Splunk docker in AWS

miburo — Tue, 05 Nov 2019 13:36:04 GMT

Thanks for the reply,

I'm looking for an environment that I can deploy and spin up and down quickly as part of testing in the CI/CD pipeline. The docker splunk seemed perfect for it though i've hit a few limitations. Do you find it quick to do an all-in-on on t2?

Re: Which service is optimal for Splunk docker in AWS

woodcock — Wed, 06 Nov 2019 01:22:01 GMT

You could get one big machine in AWS and then try out Splunk'N'Box:
https://conf.splunk.com/files/2017/slides/splunk-n-box.pdf
https://github.com/mhassan2/splunk-n-box/blob/master/splunknbox.sh

Re: Which service is optimal for Splunk docker in AWS

woodcock — Wed, 06 Nov 2019 01:22:48 GMT

Yes, I actually wrote a 2-part how-to blog but never published it.