topic Installing additional Tools on the Splunk Docker Container in Installation

Installing additional Tools on the Splunk Docker Container

MattKr — Sat, 03 Feb 2024 18:52:29 GMT

Hi, i would like to install additional tools on my splunk docker container but yum is not installed, rpm is available but needs to be configured along with a repo i guess?
What is the best way to do this, do i need a Red Hat subscription for this?

Re: Installing additional Tools on the Splunk Docker Container

scelikok — Sat, 03 Feb 2024 20:19:55 GMT

Hi @MattKr ,

Docker containers have only minimum requires tools. It is not easy to add additional tools. Don't think this as a standart linux distribution.

Re: Installing additional Tools on the Splunk Docker Container

PickleRick — Sun, 04 Feb 2024 13:05:36 GMT

Remember that docker containers are volatile (except for the non-volatile space you "attach" to them) and docker images are "as is" after build so you'd have to either create a new image based on the ready-made splunk docker image or use the modify dockerfile to build a custom docker image from scratch.

Also, the whole idea of running Splunk in a docker environment is that you do an upgrade by pulling a newer version of the whole image so you'd need to customize your image each time a new version is released.