topic Re: Problem running Splunk as service from Docker stack or compose file in Monitoring Splunk

Problem running Splunk as service from Docker stack or compose file

aradosz79 — Fri, 13 Sep 2019 13:29:20 GMT

We are preparing a Docker-based Monitoring Stack and would like to include Splunk as the optional feature:
https://agency-icole.github.io/puma/

The problem is that while in general, we are able to start Splunk as the Docker run command we are not able to do that if we choose to deliver Splunk as Docker Stack or Docker Compose.

While the parameters we pass to docker and docker-compose are identical, the second exits stating the splunkd.pid file is unreadable.

The output from docker-compose is here
Here is our splunk-compose.yml file

Would be grateful for any help from Splunk of its community.

All the best,

Re: Problem running Splunk as service from Docker stack or compose file

aradosz79 — Tue, 17 Sep 2019 07:47:40 GMT

Here are missing files from my post:

docker-compose.yml: https://drive.google.com/open?id=1JIRfaXX-cG0T1UCUVO5kK6dFkTf2K1-m
splunk.log: https://drive.google.com/open?id=1DIntCdu8fux5Ja_88LuxDS24QyAYwxSM

Re: Problem running Splunk as service from Docker stack or compose file

aradosz79 — Tue, 17 Sep 2019 07:47:40 GMT

Here are missing files from my post:

docker-compose.yml: https://drive.google.com/open?id=1JIRfaXX-cG0T1UCUVO5kK6dFkTf2K1-m
splunk.log: https://drive.google.com/open?id=1DIntCdu8fux5Ja_88LuxDS24QyAYwxSM